VDB

CNVD-2025-05455

CNVD-2025-05455 PUBLISHED CVSS 6.599999904632568 MEDIUM

Google Pixel是美国谷歌(Google)公司的一款智能手机。 Google Pixel存在逻辑错误漏洞,该漏洞源于ppcfw.c的ppcfw_deny_sec_dram_access中代码逻辑错误,攻击者可利用该漏洞导致从TEE内存中任意读取,不需要系统执行权限。

Risk Scores

CVSS 3.1
6.599999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Affected Products

VendorProductVersions
GoogleAndroidAndroid kernel

Timeline

  • Mar 4, 2025 CVE Published
  • Mar 10, 2025 PoC Published
  • Mar 11, 2025 CVE Updated
  • Mar 11, 2025 PoC Published
Open in Interactive Console →
$ Console Community · 50/day Open console ›