In sec_SHA256_Transform of sha256_core.c, there is a...
Moderate severity
Unreviewed
Published
Jan 15, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 14, 2022
Published to the GitHub Advisory Database
Jan 15, 2022
Last updated
Feb 3, 2023
In sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-197965864References: N/A
References