Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Android Keystore服务数字错误漏洞
Vulnerability Description
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。Keystore是其中的一个安全存储的服务。 Android 5.1及之前版本的Keystore服务中的keystore/keystore.cpp文件中的Blob类存在整数溢出漏洞。攻击者可借助在插入操作中使用特制的blob利用该漏洞执行任意代码，读取任意Keystore密钥。
CVSS Information
N/A
Vulnerability Type
N/A