CVE-2020-12485

State: Published
Severity: 5.5 Medium
Published: Nov 10, 2020
Updated: Sep 16, 2024
Reserved: Apr 30, 2020

Description

The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the boundary when memory access.The vulnerability eventually leads to a local DOS on the device.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	Vivo

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
The frame touch modulevivo	before PD2012_1.4.0Affected before PD1965EF_EX_EU_4.4.0Affected before PD2001F_EX_1.6.0Affected before PD1968F_EX_1.10.1Affected before PD1962_1.7.6Affected before PD1981_1.5.0Affected before PD2006F_EX_1.6.2Affected

References

https://www.vivo.com/en/support/security-advisory-detail?id=2

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.