PT-2020-5944 · Google+6 · Android+6

Published

2020-06-09

·

Updated

2024-06-15

·

CVE-2020-0198

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: Android versions Android-10
Description: The issue is related to an integer overflow in the exif data load data content function of exif-data.c. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is required for exploitation.
Recommendations: For Android version Android-10, consider restricting access to the exif data load data content function until a patch is available. As a temporary workaround, avoid using the exif-data.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2020-2648
ALT-PU-2020-2723
ALT-PU-2021-3168
ALT-PU-2023-1080
ALT-PU-2023-4922
BDU:2021-02074
CESA-2020_4766
CVE-2020-0198
DLA-2249-1
MGASA-2020-0273
OESA-2022-2006
OESA-2022-2008
OPENSUSE-SU-2024:10939-1
RHSA-2020:4766
RHSA-2020_4766
SUSE-SU-2022:1148-1
SUSE-SU-2022:1168-1
USN-4396-1

Affected Products

Alt Linux
Android
Centos
Linuxmint
Red Hat
Suse
Ubuntu