CVE-2020-0458
published 2020-12-14CVE-2020-0458: In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could…
PriorityP342high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.46%
70.6th percentile
In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-160265164
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| platform | system_media | >= 10:0 < 10:2020-12-01 | 10:2020-12-01 |
| platform | system_media | >= 8.0:0 < 8.0:2020-12-01 | 8.0:2020-12-01 |
| platform | system_media | >= 8.1:0 < 8.1:2020-12-01 | 8.1:2020-12-01 |
| platform | system_media | >= 9:0 < 9:2020-12-01 | 9:2020-12-01 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2020-0458: Android Security Bulletin 2020-12-01
CVE: CVE-2020-0458
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 8
vendor_android·2020-12-01·CVSS 7.8
CVE-2020-0458 [HIGH] CVE-2020-0458: Android Security Bulletin 2020-12-01
CVE: CVE-2020-0458
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 8
Android Security Bulletin 2020-12-01
CVE: CVE-2020-0458
Severity: CRITICAL
Type: RCE
Affected AOSP versions: 8.0, 8.1, 9, 10
References: A-160265164
[2]
GHSA
GHSA-95vg-hp9r-6q5x: In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder
ghsa_unreviewed·2022-05-24
CVE-2020-0458 [HIGH] CWE-190 GHSA-95vg-hp9r-6q5x: In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder
In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-160265164
OSV
CVE-2020-0458: In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder
osv·2020-12-01
CVE-2020-0458 CVE-2020-0458: In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder
In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-12-14
Published