PT-2020-11819
CVE-2020-0484
·
تاريخ النشر
2020-12-15
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
6.7
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Android versions Android-11
Description
The issue is related to possible memory corruption due to a use after free in the
destroyResources function of ComposerClient.h. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Recommendations
For Android version Android-11, update to a version that includes the fix for the memory corruption issue in
destroyResources of ComposerClient.h. As a temporary workaround, consider restricting access to the destroyResources function until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾