CVE-2020-0198

Name of the Vulnerable Software and Affected Versions: Android versions Android-10

Description: The issue is related to an integer overflow in the exif data load data content function of exif-data.c. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is required for exploitation.

Recommendations: For Android version Android-10, consider restricting access to the exif data load data content function until a patch is available. As a temporary workaround, avoid using the exif-data.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.