CVE-2020-0385 - In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check

Back Back to CVE browser

MEDIUM

In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check

Published Sep 17, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.65%

Description

In Parse_insh of eas_mdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-150160041

Affected products

Vendor n/a Product Android Default
unknown
Affected
- Android-9 Android-10 Android-11 Android-8.0 Android-8.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Android	unknown	Affected Android-9 Android-10 Android-11 Android-8.0 Android-8.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1888
Advisory
https://source.android.com/security/bulletin/2020-09-01
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-1888		Advisory
https://source.android.com/security/bulletin/2020-09-01		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner google_android

Published Sep 17, 2020

Updated Aug 4, 2024

Reserved Oct 17, 2019

Link CVE-2020-0385

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-0385

Red Hat

No data

ENISA EUVD

Assigner google_android

Published Sep 17, 2020

Updated Aug 4, 2024

Link EUVD-2020-1888

GitHub

No data