CVE-2020-0384 - In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check

Back Back to CVE browser

MEDIUM

In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check

Published Sep 17, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.65%

Description

In Parse_art of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-150159906

Affected products

Vendor n/a Product Android Default
unknown
Affected
- Android-8.1 Android-9 Android-10 Android-11 Android-8.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Android	unknown	Affected Android-8.1 Android-9 Android-10 Android-11 Android-8.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1887
Advisory
https://source.android.com/security/bulletin/2020-09-01
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1887		Advisory
https://source.android.com/security/bulletin/2020-09-01		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner google_android

Published Sep 17, 2020

Updated Aug 4, 2024

Reserved Oct 17, 2019

Link CVE-2020-0384

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-0384

Red Hat

No data

ENISA EUVD

Assigner google_android

Published Sep 17, 2020

Updated Aug 4, 2024

Link EUVD-2020-1887

GitHub

No data