PT-2019-5096 · Google+6 · Libvpx+7

Publicado

2019-09-27

·

Atualizado

2024-06-15

·

CVE-2019-9433

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions libvpx (affected versions not specified) Android versions Android-10
Description The issue is related to insufficient input validation in the libvpx multimedia library. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is required for exploitation.
Recommendations For libvpx, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Android versions Android-10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALSA-2020:4629
BDU:2020-01762
CESA-2020_3876
CESA-2020_4629
CVE-2019-9433
DLA-2012-1
DSA-4578-1
OPENSUSE-SU-2020:0105-1
OPENSUSE-SU-2020_0105-1
OPENSUSE-SU-2024:11010-1
RHSA-2020:3876
RHSA-2020:4629
RHSA-2020_3876
RHSA-2020_4629
RLSA-2020:4629
SUSE-SU-2020:0143-1
SUSE-SU-2020:0459-1
USN-4199-1
USN-4199-2

Produtos afetados

Almalinux
Android
Centos
Red Hat
Rocky Linux
Suse
Ubuntu
Libvpx