Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-154123412
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Google Android 缓冲区错误漏洞
Vulnerability Description
Android是美国谷歌（Google）和开放手持设备联盟（简称OHA）的一套以Linux为基础的开源操作系统。 Android 存在缓冲区错误漏洞，该漏洞源于CryptoPlugin.cpp的decrypt和decrypt_1_2缺少边界检查而读取越界。以下产品及版本受到影响：Android-9版本，Android-10版本，Android-11版本。
CVSS Information
N/A
Vulnerability Type
N/A