PT-2020-11535
CVE-2020-0174
·
Published
2020-06-11
·
Updated
2021-07-21
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Android versions Android-10
Description
The issue is related to a possible resource exhaustion due to a missing bounds check in the Parse ptbl function of eas mdls.c. This could lead to a remote denial of service, and no additional execution privileges are needed. User interaction is required for exploitation.
Recommendations
For Android version Android-10, update to a version that includes a fix for the missing bounds check in the Parse ptbl function of eas mdls.c.
Found an issue in the description? Have something to add? Feel free to write us 👾