New vulnerability on the NVD: CVE-2020-0411

0

0

In ~AACExtractor() of AACExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-142641801

Published at: October 14, 2020 at 10:15AM
View on website

John Jason Fallows

See author's posts