Description
A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execution. The elevated installer then executes the attacker-controlled binary, resulting in local privilege escalation to a high-integrity (administrative) context. This issue affects Sandisk Dashboard through 5.2.2.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sandisk | Sandisk Dashboard | ≤ 5.2.2.3 | — |