libfdt_fuzzer: Stack-overflow in fdt_path_offset_namelen

2022-12-0100:00:00

Google

osv.dev

libfdt_fuzzer

stack-overflow

fdt_path_offset_namelen

out of bounds read

fdt_ro.c

information disclosure

system execution.

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

Percentile

5.1%

JSON

In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.