CVE-2020-0383
published 2020-09-17CVE-2020-0383: In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the…
PriorityP425medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
EPSS
0.65%
46.7th percentile
In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the media extractor process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150160279
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | external_sonivox | >= 10:0 < 10:2020-09-01 | 10:2020-09-01 |
| platform | external_sonivox | >= 8.0:0 < 8.0:2020-09-01 | 8.0:2020-09-01 |
| platform | external_sonivox | >= 8.1:0 < 8.1:2020-09-01 | 8.1:2020-09-01 |
| platform | external_sonivox | >= 9:0 < 9:2020-09-01 | 9:2020-09-01 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2020-0383: Android Security Bulletin 2020-09-01
CVE: CVE-2020-0383
Severity: HIGH
Type: ID
Affected AOSP versions: 8
vendor_android·2020-09-01·CVSS 5.5
CVE-2020-0383 [MEDIUM] CVE-2020-0383: Android Security Bulletin 2020-09-01
CVE: CVE-2020-0383
Severity: HIGH
Type: ID
Affected AOSP versions: 8
Android Security Bulletin 2020-09-01
CVE: CVE-2020-0383
Severity: HIGH
Type: ID
Affected AOSP versions: 8.0, 8.1, 9, 10
References: A-150160279
GHSA
GHSA-4c4v-9xr2-899m: In Parse_ins of eas_mdls
ghsa_unreviewed·2022-05-24
CVE-2020-0383 [MEDIUM] GHSA-4c4v-9xr2-899m: In Parse_ins of eas_mdls
In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the media extractor process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150160279
OSV
CVE-2020-0383: In Parse_ins of eas_mdls
osv·2020-09-01
CVE-2020-0383 CVE-2020-0383: In Parse_ins of eas_mdls
In Parse_ins of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure in the media extractor process with no additional execution privileges needed. User interaction is needed for exploitation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-09-17
Published