CVE-2020-12485 MEDIUM

CVE-2020-12485

Vendor Vivo
Product The frame touch module
Weakness CWE-125
Published November 10, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory access.The vulnerability eventually leads to a local DOS on the device.

Key dates

02Disclosure timeline

November 10, 2020 CVE published
September 16, 2024 Record updated