CVE-2020-35608

published 2020-12-22

CVE-2020-35608: A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses the PACKET_MMAP functionality to trigger this vulnerability.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	azure_sphere	—	—

CWE-74