3 ms·
More info on the exploit that was patched found here: https://cwe.mitre.org/data/definitions/787.html https://cwe.mitre.org/data/definitions/787.html. An appli
by gzer0 5y ago
More info on the exploit that was patched found here: https://cwe.mitre.org/data/definitions/787.html https://cwe.mitre.org/data/definitions/787.html.
An application may be able to execute arbitrary code with kernel privileges.
- EE84M3i 5y agoDid you mean to link to a CWE page? This isn't about a specific bug.
- yunohn 5y agoIsn’t it? The patch is specifically to address: > An out-of-bounds write issue was addressed with improved bounds checking. (CVE-2022-22675) Which sounds exactly like a CWE-787 candidate.
- Thorrez 5y agogzer0's comment is a bit confusing. It could either be interpreted as saying "here's more info about this exact vulnerability" or "here's more info about this category of vulnerabilities". EE84M3i interpreted the comment as the first, but then saw the link is actually the second, and thought maybe EE84M3i made a mistake with the comment.
- mhio 5y agoI read it as the second as well just due to the link, but > More info on the <type of> exploit that was patched found here might have inferred the category of vulnerabilities more.
- deleted 5y ago[deleted]