In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
为什么是这个 VPI(可解释·实验性)
VPI 计算依据
| 影响度 | 35.00 |
| 利用信号(无额外利用信号) | ×1.00 |
| VPI | 35.00 |
VPI 公式 vpi-v1