CVE-2020-0384
published 2020-09-17CVE-2020-0384: In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the…
PriorityP424medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
EPSS
0.65%
46.6th percentile
In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150159906
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | external_sonivox | >= 10:0 < 10:2020-09-01 | 10:2020-09-01 |
| platform | external_sonivox | >= 8.0:0 < 8.0:2020-09-01 | 8.0:2020-09-01 |
| platform | external_sonivox | >= 8.1:0 < 8.1:2020-09-01 | 8.1:2020-09-01 |
| platform | external_sonivox | >= 9:0 < 9:2020-09-01 | 9:2020-09-01 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jm56-mq2p-7c4g: In Parse_art of eas_mdls
ghsa_unreviewed·2022-05-24
CVE-2020-0384 [MEDIUM] GHSA-jm56-mq2p-7c4g: In Parse_art of eas_mdls
In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150159906
OSV
CVE-2020-0384: In Parse_art of eas_mdls
osv·2020-09-01
CVE-2020-0384 CVE-2020-0384: In Parse_art of eas_mdls
In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.
Android
CVE-2020-0384: Android Security Bulletin 2020-09-01
CVE: CVE-2020-0384
Severity: HIGH
Type: ID
Affected AOSP versions: 8
vendor_android·2020-09-01·CVSS 5.5
CVE-2020-0384 [MEDIUM] CVE-2020-0384: Android Security Bulletin 2020-09-01
CVE: CVE-2020-0384
Severity: HIGH
Type: ID
Affected AOSP versions: 8
Android Security Bulletin 2020-09-01
CVE: CVE-2020-0384
Severity: HIGH
Type: ID
Affected AOSP versions: 8.0, 8.1, 9, 10
References: A-150159906
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-09-17
Published