In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libjpeg-turbo | Feb 7, 2020 | Nov 13, 2019 |
| Debian | — | Upgrade libjpeg-turbo | Jun 2, 2022 | Nov 13, 2019 |
| Gentoo Linux | — | Upgrade media-libs/libjpeg-turbo. | Mar 16, 2020 | Nov 13, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libjpeg-turbo-develUpgrade libjpeg-turbo | Sep 16, 2021 | Nov 13, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libjpeg-turboUpgrade libjpeg-turbo-devel | Apr 30, 2021 | Nov 13, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libjpeg-turboUpgrade libjpeg-turbo-devel | Mar 24, 2021 | Nov 13, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libjpeg-turboUpgrade libjpeg-turbo-devel | Aug 31, 2020 | Nov 13, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 13, 2019 |
| Suse | — | Upgrade libjpeg62-turboUpgrade libjpeg8-develUpgrade libjpeg8-devel-32bitUpgrade libturbojpeg0Upgrade libjpeg62Upgrade libturbojpeg0-32bitUpgrade libjpeg8-32bitUpgrade libjpeg62-32bitUpgrade libjpeg8Upgrade libjpeg62-develUpgrade libjpeg-turboUpgrade libjpeg62-devel-32bit | Nov 15, 2019 | Nov 13, 2019 |
| Ubuntu | — | Upgrade libjpeg-turbo8 | Mar 2, 2020 | Nov 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub