Home

CVE-2020-0034

Description

In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
4.51

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2020:3876) libvpx security update libvpx-1.3.0-8.el7.i686.rpmLinux
(RHSA-2020:3876) libvpx security update libvpx-1.3.0-8.el7.x86_64.rpmLinux
(RHSA-2020:3876) libvpx security update libvpx-devel-1.3.0-8.el7.i686.rpmLinux
(RHSA-2020:3876) libvpx security update libvpx-devel-1.3.0-8.el7.x86_64.rpmLinux
(RHSA-2020:3876) libvpx security update libvpx-utils-1.3.0-8.el7.x86_64.rpmLinux
(CESA-2020:3876) libvpx security update libvpx-1.3.0-8.el7.x86_64.rpmLinux
(CESA-2020:3876) libvpx security update libvpx-devel-1.3.0-8.el7.x86_64.rpmLinux
(CESA-2020:3876) libvpx security update libvpx-utils-1.3.0-8.el7.x86_64.rpmLinux
SUSE-SU-2021:4168-1(SUSE Linux Enterprise Server 12-SP5 ) libvpx-debugsource-1.3.0-3.9.1.x86_64.rpmLinux
SUSE-SU-2021:4168-1(SUSE Linux Enterprise Server 12-SP5 ) libvpx1-1.3.0-3.9.1.x86_64.rpmLinux
SUSE-SU-2021:4168-1(SUSE Linux Enterprise Server 12-SP5 ) libvpx1-debuginfo-1.3.0-3.9.1.x86_64.rpmLinux
(RHSA-2020:3876)Moderate: security update libvpx-debuginfo-1.3.0-8.el7.i686.rpmLinux
(RHSA-2020:3876)Moderate: security update libvpx-debuginfo-1.3.0-8.el7.x86_64.rpmLinux
Libvpx update (ELSA-2020-3876) libvpx-1.3.0-8.el7.i686.rpmLinux
Libvpx update (ELSA-2020-3876) libvpx-1.3.0-8.el7.x86_64.rpmLinux
libvpx Security Update (ALAS-2020-1558) libvpx-1.3.0-8.amzn2.0.1.i686.rpmLinux
libvpx Security Update (ALAS-2020-1558) libvpx-1.3.0-8.amzn2.0.1.x86_64.rpmLinux
libvpx Security Update (ALAS-2020-1558) libvpx-devel-1.3.0-8.amzn2.0.1.x86_64.rpmLinux
libvpx Security Update (ALAS-2020-1558) libvpx-utils-1.3.0-8.amzn2.0.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234