PT-2020-11571 · Google · Android

Published 2020-06-11 · Updated 2023-03-03 · CVE-2020-0213

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions Android-10 through Android-11

Description A possible out of bounds write due to a heap buffer overflow exists in the hevcd fmt conv 420sp to 420sp function of ihevcd fmt conv 420sp to 420sp.s. This issue could lead to remote information disclosure without requiring additional execution privileges. User interaction is necessary for exploitation.

Recommendations For Android versions Android-10 through Android-11, update to a version that contains a fix for this issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ASB-A-143464314

CVE-2020-0213

Affected Products

Android

References · 4

• https://source.android.com/security/bulletin/2020-10-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-0213 · Vendor Advisory
• https://osv.dev/vulnerability/ASB-A-143464314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0213 · Security Note