PT-2020-11628
CVE-2020-0274
·
Published
2020-09-17
·
Updated
2020-09-21
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-11
Description
In the OMX parser, there is a possible information disclosure due to a returned raw pointer. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Recommendations
For Android version Android-11, consider restricting access to the OMX parser to minimize the risk of exploitation until a patch is available. As a temporary workaround, disabling the vulnerable component may help prevent local information disclosure.
Found an issue in the description? Have something to add? Feel free to write us 👾