Description


In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Related CPE's


Weaknesses



CWE-908

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

Information


Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-14T20:15:12.397Z

2 years ago

Last modified

2024-11-21T06:42:26.047Z

1 year ago