PT-2021-13380
CVE-2021-0971
·
تاريخ النشر
2021-12-01
·
تاريخ التحديث
2021-12-17
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-9 through Android-12
Description
The issue is related to a missing bounds check in the MPEG4Source::read function of MPEG4Extractor.cpp, which could lead to a possible out of bounds write. This might result in remote information disclosure without requiring additional execution privileges. User interaction is necessary for exploitation.
Recommendations
For Android versions Android-9 through Android-12, update to a version that includes the fix for the issue in MPEG4Extractor.cpp to prevent potential remote information disclosure.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾