PT-2020-12882 · Oppo · Oppo Vooc

Published 2020-12-31 · Updated 2021-01-06 · CVE-2020-11834

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions oppo vooc (affected versions not specified)

Description The issue is related to the function proc fastchg fw update write in the file oppo vooc.c, where it fails to check the parameter len. This oversight results in a vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-11834

Affected Products

Oppo Vooc

References · 3

• 🔥 https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1333235676610830336 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11834 · Security Note
• https://t.me/cvenotify/8046 · Telegram Post