CVE-2020-12485

MEDIUM

5.5

Description

The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory access.The vulnerability eventually leads to a local DOS on the device.

Details CVE

Score CVSS v3.15.5

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie11/10/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

vivo:frame_touch_module

Faiblesses (CWE)

CWE-125CWE-125

References

https://www.vivo.com/en/support/security-advisory-detail?id=2(security@vivo.com)

https://www.vivo.com/en/support/security-advisory-detail?id=2(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.