在 UFS 现场固件更新(FFU)功能中,由于缺少对 PRDT 表大小的边界检查,可能导致越界写入。该漏洞可在无需额外执行权限的情况下,引发本地代码执行或拒绝服务攻击。
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.