PT-2020-11523
CVE-2020-0162
·
تاريخ النشر
2020-06-11
·
تاريخ التحديث
2020-06-11
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Android versions Android-10
Description
The issue is related to improper input validation in the
parseSampleAuxiliaryInformationOffsets function of MPEG4Extractor.cpp. This could lead to resource exhaustion, resulting in a remote denial of service. No additional execution privileges are needed for exploitation, but user interaction is required.Recommendations
For Android version Android-10, update to a version that includes the fix for the improper input validation issue in
MPEG4Extractor.cpp to prevent potential resource exhaustion and remote denial of service. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾