PT-2020-12881 · Oppo · Oppo Charger

Published 2020-12-31 · Updated 2021-01-06 · CVE-2020-11833

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Oppo charger (affected versions not specified)

Description The issue arises from the function mp2650 data log write in the file oppo mp2650.c, where it fails to check the parameter len. This oversight leads to a vulnerability. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-11833

Affected Products

Oppo Charger

References · 3

• 🔥 https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1333235676610830336 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11833 · Security Note
• https://t.me/cvenotify/8044 · Telegram Post