Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-0478

Опубликовано: 15 дек. 2020
Источник: debian
EPSS Низкий

Описание

In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418

Пакеты

ПакетСтатусВерсия исправленияРелизТип
aomfixed1.0.0.errata1.avif-1package
aomignoredbullseyepackage
aomignoredbusterpackage

Примечания

  • https://android.googlesource.com/platform/external/libaom/+/816f15265cb89a02d7ce4b657de277828e71a4b1

  • https://source.android.com/security/bulletin/pixel/2020-12-01

  • https://aomedia.googlesource.com/aom/+/ebba9c769be2c99d5396d0018901e9a4af5e2d2c (v1.0.0-errata1-avif)

EPSS

Процентиль: 18%
0.00056
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 5 лет назад

In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418

CVSS3: 7.8
nvd
около 5 лет назад

In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418

github
больше 3 лет назад

In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418

EPSS

Процентиль: 18%
0.00056
Низкий