总结
- 严重程度 CVES
- High CVE-2024-39441
细节
- CVE ID CVE-2024-39441
- 问题 Exposure of Sensitive Information to an Unauthorized Actor in wifi display
- 误差形貌
In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed.
- 手艺领域 Android
- 误差类型 CWE-200 Information Disclosure
- 攻击途径 Local
- CVSS 品级 High
- CVSS 分数 7.1
- CVSS 评分 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
- 影响芯片*
T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000
- 影响软件版本
Android13/Android14/Android15
*受影响芯片组列表可能不完整。。如需相识最新信息,OEM可直接会见 https://unisupport.unisoc.com
误差类型界说
- 缩写 释义
- RCE Remote Code Execution
- EoP Elevation of Privilege
- ID Information Disclosure
- DoS Denial of Service
- N/A Classification not available
版本