CVE-2019-2126
Description
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.
Risk Information
Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
9.309
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| VP8 and VP9 video codec (USN-4199-1) libvpx3_1.5.0-2ubuntu1.1_i386.deb | Linux |
| VP8 and VP9 video codec (USN-4199-1) libvpx3_1.5.0-2ubuntu1.1_amd64.deb | Linux |
| VP8 and VP9 video codec (USN-4199-1) libvpx5_1.7.0-3ubuntu0.18.04.1_i386.deb | Linux |
| VP8 and VP9 video codec (USN-4199-1) libvpx5_1.7.0-3ubuntu0.18.04.1_amd64.deb | Linux |
| VP8 and VP9 video codec (USN-4199-1) libvpx5_1.7.0-3ubuntu0.19.04.1_i386.deb | Linux |
| VP8 and VP9 video codec (USN-4199-1) libvpx5_1.7.0-3ubuntu0.19.04.1_amd64.deb | Linux |
| libvpx security update (RLSA-2020:4629) libvpx-1.7.0-8.el8.i686.rpm | Linux |
| libvpx security update (RLSA-2020:4629) libvpx-1.7.0-8.el8.x86_64.rpm | Linux |
| Full 2D and 3D game engine with editor (USN-7579-1) godot3_3.5.2-stable-2ubuntu0.24.10.1_amd64.deb | Linux |
| Full 2D and 3D game engine with editor (USN-7579-1) godot3_3.6+ds-2ubuntu0.1_amd64.deb | Linux |
| Full 2D and 3D game engine with editor (USN-7579-1) godot3-runner_3.5.2-stable-2ubuntu0.24.10.1_amd64.deb | Linux |
| Full 2D and 3D game engine with editor (USN-7579-1) godot3-runner_3.6+ds-2ubuntu0.1_amd64.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234