description: The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory access.The vulnerability eventually leads to a local DOS on the device.
problem types: CWE-125 Out-of-bounds Read
affected:
{
product: The frame touch module
vendor: vivo
versions:
lessThan: PD2012_1.4.0, status: affected, version: unspecified, versionType: custom
lessThan: PD1965EF_EX_EU_4.4.0, status: affected, version: unspecified, versionType: custom
lessThan: PD2001F_EX_1.6.0, status: affected, version: unspecified, versionType: custom
lessThan: PD1968F_EX_1.10.1, status: affected, version: unspecified, versionType: custom
lessThan: PD1962_1.7.6, status: affected, version: unspecified, versionType: custom
lessThan: PD1981_1.5.0, status: affected, version: unspecified, versionType: custom
lessThan: PD2006F_EX_1.6.2, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
version: 3.1
]