CVE-2020-10027 — ARC Platform Uses Signed Integer Comparison When Validating Syscall Numbers
An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zeph…
Published: 2020-05-11 · CVSS: 7.8 · CVSS 3.1
An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7