Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-0002

In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution with no additional execution privi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
google_android

Description

In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-142602711

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Android

  • Android-8.0affected
  • Android-8.1affected
  • Android-9affected
  • Android-10affected

References