CVE-2020-0385
published 2020-09-17CVE-2020-0385: In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the…
PriorityP424medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
EPSS
0.65%
46.8th percentile
In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-150160041
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | external_sonivox | >= 10:0 < 10:2020-09-01 | 10:2020-09-01 |
| platform | external_sonivox | >= 8.0:0 < 8.0:2020-09-01 | 8.0:2020-09-01 |
| platform | external_sonivox | >= 8.1:0 < 8.1:2020-09-01 | 8.1:2020-09-01 |
| platform | external_sonivox | >= 9:0 < 9:2020-09-01 | 9:2020-09-01 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g97f-pgv6-f75q: In Parse_insh of eas_mdls
ghsa_unreviewed·2022-05-24
CVE-2020-0385 [MEDIUM] GHSA-g97f-pgv6-f75q: In Parse_insh of eas_mdls
In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-150160041
OSV
CVE-2020-0385: In Parse_insh of eas_mdls
osv·2020-09-01
CVE-2020-0385 CVE-2020-0385: In Parse_insh of eas_mdls
In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.
Android
CVE-2020-0385: Android Security Bulletin 2020-09-01
CVE: CVE-2020-0385
Severity: HIGH
Type: ID
Affected AOSP versions: 8
vendor_android·2020-09-01·CVSS 5.5
CVE-2020-0385 [MEDIUM] CVE-2020-0385: Android Security Bulletin 2020-09-01
CVE: CVE-2020-0385
Severity: HIGH
Type: ID
Affected AOSP versions: 8
Android Security Bulletin 2020-09-01
CVE: CVE-2020-0385
Severity: HIGH
Type: ID
Affected AOSP versions: 8.0, 8.1, 9, 10
References: A-150160041
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-09-17
Published