Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-2201

Опубликовано: 13 нояб. 2019
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 9.3
CVSS3: 7.8

Описание

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338

РелизСтатусПримечание
bionic

released

1.5.2-0ubuntu5.18.04.3
devel

not-affected

disco

released

2.0.1-0ubuntu2.2
eoan

not-affected

esm-infra-legacy/trusty

not-affected

esm-infra/bionic

released

1.5.2-0ubuntu5.18.04.3
esm-infra/xenial

released

1.4.2-0ubuntu3.3
precise/esm

not-affected

trusty

ignored

end of standard support
trusty/esm

not-affected

Показывать по

EPSS

Процентиль: 77%
0.01083
Низкий

9.3 Critical

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
redhat
больше 6 лет назад

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338

CVSS3: 7.8
nvd
около 6 лет назад

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338

CVSS3: 7.8
debian
около 6 лет назад

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is ...

suse-cvrf
около 6 лет назад

Security update for libjpeg-turbo

suse-cvrf
около 6 лет назад

Security update for libjpeg-turbo

EPSS

Процентиль: 77%
0.01083
Низкий

9.3 Critical

CVSS2

7.8 High

CVSS3