CVE-2020-0478
CVE-2020-0478
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In extend_frame_lowbd of restoration.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150780418
CVSS 7.8 · High · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
android
- Versions
- Android-11: Affected
No fix published
aom Debian:12
- Affected ranges
- ECOSYSTEM: < 1.0.0.errata1.avif-1
Update to 1.0.0.errata1.avif-1
aom Debian:13
- Affected ranges
- ECOSYSTEM: < 1.0.0.errata1.avif-1
Update to 1.0.0.errata1.avif-1
aom Debian:14
- Affected ranges
- ECOSYSTEM: < 1.0.0.errata1.avif-1
Update to 1.0.0.errata1.avif-1