CVE-2020-35608 in Azure Sphereinfo

Summary

by MITRE • 12/23/2020

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses the PACKET_MMAP functionality to trigger this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Disclosure

12/23/2020

Moderation

accepted

CPE

ready

EPSS

0.04035

KEV

no

Activities

very low

Sources

Want to know what is going to be exploited?

We predict KEV entries!