PT-2022-14431
CVE-2022-20202
·
Published
2022-06-15
·
Updated
2022-06-24
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Android-12L
Description
In the
ih264 resi trans quant 4x4 sse42 function of ih264 resi trans quant sse42.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Recommendations
For Android version Android-12L, update to a version that includes the fix for the issue in
ih264 resi trans quant 4x4 sse42 function to prevent remote information disclosure. Found an issue in the description? Have something to add? Feel free to write us 👾