CVE-2020-0452
published 2020-11-10CVE-2020-0452: In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a…
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libexif | < libexif 0.6.22-3 (bookworm) | libexif 0.6.22-3 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| libexif_project | libexif | >= 0 < 0.6.22-3 | 0.6.22-3 |
| libexif_project | libexif | >= 0 < 0.6.22-3 | 0.6.22-3 |
| libexif_project | libexif | >= 0 < 0.6.22-3 | 0.6.22-3 |
| libexif_project | libexif | >= 0 < 0.6.22-3 | 0.6.22-3 |
| platform | external_libexif | >= 10:0 < 10:2020-11-01 | 10:2020-11-01 |
| platform | external_libexif | >= 11-next:0 < 11-next:2020-11-01 | 11-next:2020-11-01 |
| platform | external_libexif | >= 11:0 < 11:2020-11-01 | 11:2020-11-01 |
| platform | external_libexif | >= 8.0:0 < 8.0:2020-11-01 | 8.0:2020-11-01 |
| platform | external_libexif | >= 8.1:0 < 8.1:2020-11-01 | 8.1:2020-11-01 |
| platform | external_libexif | >= 9:0 < 9:2020-11-01 | 9:2020-11-01 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL