CVE-2020-0034
CVE-2020-0034
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770
CVSS 7.5 · High · EPSS 1.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
android
- Versions
- Android-8.0 Android-8.1: Affected
No fix published
libvpx Debian:12
- Affected ranges
- ECOSYSTEM: < 1.7.0-3
Update to 1.7.0-3
libvpx Debian:13
- Affected ranges
- ECOSYSTEM: < 1.7.0-3
Update to 1.7.0-3
libvpx Debian:14
- Affected ranges
- ECOSYSTEM: < 1.7.0-3
Update to 1.7.0-3
libvpx Ubuntu:Pro:14.04:LTS
- Versions
- 1.2.0-2
- 1.3.0-1
- 1.3.0-2
- 1.3.0-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: < 1.3.0-2ubuntu0.1~esm2
Update to 1.3.0-2ubuntu0.1~esm2
libvpx Ubuntu:Pro:16.04:LTS
- Versions
- 1.4.0-4
- 1.5.0-2
- 1.5.0-2ubuntu1
- 1.5.0-2ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 1.5.0-2ubuntu1.1+esm1
Update to 1.5.0-2ubuntu1.1+esm1