PT-2021-13057
CVE-2021-0379
·
تاريخ النشر
2021-03-10
·
تاريخ التحديث
2021-03-12
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Android versions Android-11
Description:
In the
getUpTo17bits function of pvmp3 getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Recommendations:
For Android version Android-11, update to a version that includes the fix for the issue in
pvmp3 getbits.cpp, specifically addressing the getUpTo17bits function to prevent the heap buffer overflow. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾