VDB
CNVD-2025-05455
CNVD-2025-05455
PUBLISHED
CVSS 6.599999904632568 MEDIUM
Google Pixel是美国谷歌(Google)公司的一款智能手机。 Google Pixel存在逻辑错误漏洞,该漏洞源于ppcfw.c的ppcfw_deny_sec_dram_access中代码逻辑错误,攻击者可利用该漏洞导致从TEE内存中任意读取,不需要系统执行权限。
Risk Scores
CVSS 3.1
6.599999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Android | Android kernel |
Timeline
- Mar 4, 2025 CVE Published
- Mar 10, 2025 PoC Published
- Mar 11, 2025 CVE Updated
- Mar 11, 2025 PoC Published