PT-2020-11599
CVE-2020-0244
·
Published
2020-12-15
·
Updated
2020-12-16
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-11
Description
The issue is related to a possible out of bounds read in the
writeBurstBufferBytes function of SPDIFEncoder.cpp. This could lead to local information disclosure, but there is no clear path for exfiltrating the data. The exploitation does not require additional execution privileges, but it does need user interaction.Recommendations
For Android version Android-11, apply the necessary patch or update to resolve the out of bounds read issue in the
writeBurstBufferBytes function of SPDIFEncoder.cpp. As a temporary workaround, consider restricting access to sensitive information until the issue is fully resolved. Found an issue in the description? Have something to add? Feel free to write us 👾