CVE-2020-0161 - In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation

Back Back to CVE browser

MEDIUM

In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation

Published Jun 11, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 0.64%

Description

In parseChunk of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-127973550

Affected products

Vendor n/a Product Android Default
unknown
Affected
- Android-10

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Android	unknown	Affected Android-10

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1665
Advisory
https://source.android.com/security/bulletin/pixel/2020-06-01
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1665		Advisory
https://source.android.com/security/bulletin/pixel/2020-06-01		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner google_android

Published Jun 11, 2020

Updated Aug 4, 2024

Reserved Oct 17, 2019

Link CVE-2020-0161

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-0161

Red Hat

No data

ENISA EUVD

Assigner google_android

Published Jun 11, 2020

Updated Aug 4, 2024

Link EUVD-2020-1665

GitHub

No data