CVE-2020-35608

2020-12-2219:23:15

mitre

www.cve.org

0.001 Low

EPSS

Percentile

34.4%

JSON

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses the PACKET_MMAP functionality to trigger this vulnerability.