PT-2020-11533
CVE-2020-0172
·
Published
2020-06-11
·
Updated
2021-07-21
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Android versions Android-10
Description
The issue is related to a missing bounds check in the Parse art function of eas mdls.c, which could lead to resource exhaustion. This might result in a remote denial of service, and no additional execution privileges are needed for exploitation. User interaction is required for this issue to be exploited.
Recommendations
For Android version Android-10, update to a version that includes a fix for the missing bounds check in the Parse art function of eas mdls.c.
Found an issue in the description? Have something to add? Feel free to write us 👾