In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libvpxalma-upgrade-libvpx-devel | May 4, 2022 | Sep 27, 2019 | |
| Alpine Linux | alpine-linux-upgrade-libvpx | Aug 22, 2024 | Sep 27, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libvpxamazon-linux-ami-2-upgrade-libvpx-debuginfoamazon-linux-ami-2-upgrade-libvpx-develamazon-linux-ami-2-upgrade-libvpx-utils | Nov 12, 2020 | Sep 27, 2019 | |
| Centos_linux | — | centos-upgrade-libvpxcentos-upgrade-libvpx-debuginfocentos-upgrade-libvpx-debugsourcecentos-upgrade-libvpx-develcentos-upgrade-libvpx-utilscentos-upgrade-libvpx-utils-debuginfo | Oct 1, 2020 | Sep 27, 2019 |
| Debian | debian-upgrade-libvpx | Nov 28, 2019 | Sep 27, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-libvpx | Mar 27, 2020 | Sep 27, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libvpx | Aug 31, 2020 | Sep 27, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-mail-thunderbird-68-9-0-11-4-24-0-1-75-1oracle-solaris-11-4-upgrade-web-browser-firefox-68-9-0-11-4-24-0-1-75-1 | Jan 19, 2021 | Sep 27, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-libvpxoracle-linux-upgrade-libvpx-develoracle-linux-upgrade-libvpx-utils | Oct 7, 2020 | Oct 26, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libvpxredhat-upgrade-libvpx-debuginforedhat-upgrade-libvpx-debugsourceredhat-upgrade-libvpx-develredhat-upgrade-libvpx-utilsredhat-upgrade-libvpx-utils-debuginfo | Oct 1, 2020 | Sep 27, 2019 | |
| Rocky_linux | rocky-upgrade-libvpxrocky-upgrade-libvpx-debuginforocky-upgrade-libvpx-debugsourcerocky-upgrade-libvpx-devel | Mar 12, 2024 | Sep 27, 2019 | |
| Suse | — | suse-upgrade-libvpx-develsuse-upgrade-libvpx1suse-upgrade-libvpx1-32bitsuse-upgrade-libvpx4suse-upgrade-libvpx4-32bitsuse-upgrade-vpx-tools | Jan 21, 2020 | Sep 27, 2019 |
| Ubuntu | ubuntu-pro-upgrade-libvpx1ubuntu-upgrade-libvpx3ubuntu-upgrade-libvpx5 | Nov 26, 2019 | Sep 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub