PT-2020-11699 · Google · Android

Published 2020-09-17 · Updated 2021-07-21 · CVE-2020-0346

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions Android-11

Description The issue is related to an integer overflow in Mediaserver, which could lead to a possible out of bounds write. This might result in local escalation of privilege if integer sanitization were not enabled, although it is enabled by default. No additional execution privileges are needed, and user interaction is not required for exploitation.

Recommendations For Android version Android-11, ensure that integer sanitization remains enabled to prevent potential exploitation.

Fix

Integer Overflow

Memory Corruption

Weakness Enumeration

CWE-190

CWE-787

Related Identifiers

CVE-2020-0346

Affected Products

Android

References · 3

• https://osv.dev/vulnerability/CVE-2020-0346 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0346 · Security Note
• https://source.android.com/security/bulletin/android-11 · Vendor Advisory