In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-111760968.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 24, 2019 | Jun 7, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-headers | Dec 4, 2019 | Jun 7, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Nov 19, 2019 | Jun 7, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-4.15.0-58-lowlatencyUpgrade linux-image-4.15.0-1040-gkeUpgrade linux-image-4.15.0-1040-gcpUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-4.15.0-1060-snapdragonUpgrade linux-image-4.15.0-58-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1050-oemUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-58-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1042-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-4.15.0-1021-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1055-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1043-raspi2Upgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-aws | Aug 14, 2019 | Jun 7, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub