PT-2020-11803
CVE-2020-0464
·
Published
2020-12-01
·
Updated
2020-12-15
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-10
Description
A possible side channel information disclosure exists in the resolv cache lookup function of res cache.cpp. This issue could lead to local information disclosure of accessed web resources without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations
For Android version Android-10, apply the fix provided by the Android security patch to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾