PT-2020-11453
CVE-2020-0088
·
تاريخ النشر
2020-03-15
·
تاريخ التحديث
2022-04-22
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Android version 10
Description
The issue is related to possible resource exhaustion due to improper input validation in the
parseTrackFragmentRun function of MPEG4Extractor.cpp. This could lead to remote denial of service with no additional execution privileges needed. User interaction is required for exploitation.Recommendations
For Android version 10, update to a version that includes the fix for the resource exhaustion issue in
MPEG4Extractor.cpp to prevent remote denial of service attacks. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾