In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
为什么是这个 VPI(可解释·实验性)
VPI 计算依据
| 影响度 | 33.00 |
| 利用信号(无额外利用信号) | ×1.00 |
| VPI | 33.00 |
VPI 公式 vpi-v1