Improper Input Validation Vulnerability in OPPO Charger Software
CVE-2020-11834

5.5MEDIUM

Key Information:

Vendor

Oppo

Status
Oppo Find X2
Vendor
CVE Published:
31 December 2020

What is CVE-2020-11834?

A vulnerability exists in OPPO's charger software, specifically within the function proc_fastchg_fw_update_write, where the absence of validation for the parameter 'len' could allow for unexpected behaviors or potential security risks. This flaw can be exploited by attackers to manipulate the update process, potentially leading to unauthorized access or functionality compromise.

Affected Version(s)

OPPO Find X2 ColorOS V11

References

https://security.oppo.com/en/noticedetails.html?noticeId=...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.