PT-2020-13140 · Vivo · The Frame Touch Module

Published 2020-11-10 · Updated 2020-11-24 · CVE-2020-12485

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue arises from the frame touch module not validating parameter lengths during processing, leading to out-of-bounds memory access. This results in a local Denial of Service (DOS) on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-12485

Affected Products

The Frame Touch Module

References · 5

• https://vivo.com/en/support/security-advisory-detail?id=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12485 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12485 · Vendor Advisory
• https://t.me/cibsecurity/16090 · Telegram Post
• https://t.me/cvenotify/6125 · Telegram Post