PT-2019-5091 · Google+2 · Libvpx+3
Moritz Mühlenhoff
·
Publicado
2019-09-27
·
Atualizado
2024-06-15
·
CVE-2019-9325
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
libvpx versions prior to the fixed version
Android versions Android-10
Description
The issue is related to a missing bounds check in libvpx, which could lead to a possible out of bounds read. This may result in remote information disclosure without requiring additional execution privileges. User interaction is necessary for exploitation.
Recommendations
For libvpx, update to a version that includes the fix for the out of bounds read issue.
For Android versions Android-10, apply the security patch that addresses the libvpx vulnerability.
As a temporary workaround, consider restricting access to multimedia content that utilizes the libvpx library until a patch is available.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Android
Suse
Ubuntu
Libvpx