In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvpxUpgrade libvpx-devel | May 4, 2022 | Sep 27, 2019 |
| Alpine Linux | — | Upgrade libvpx | Aug 22, 2024 | Sep 27, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libvpxUpgrade libvpx-utilsUpgrade libvpx-debuginfoUpgrade libvpx-devel | Nov 12, 2020 | Sep 27, 2019 |
| Centos_linux | — | Upgrade libvpxUpgrade libvpx-utilsUpgrade libvpx-debugsourceUpgrade libvpx-utils-debuginfoUpgrade libvpx-debuginfoUpgrade libvpx-devel | Oct 1, 2020 | Sep 27, 2019 |
| Debian | — | Upgrade libvpx | Nov 28, 2019 | Sep 27, 2019 |
| Gentoo Linux | — | Upgrade media-libs/libvpx. | Mar 27, 2020 | Sep 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvpx | Aug 31, 2020 | Sep 27, 2019 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 68.9.0-11.4.24.0.1.75.1 on Solaris 11.4Upgrade mail/thunderbird to version 68.9.0-11.4.24.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade libvpx-develUpgrade libvpx-utilsUpgrade libvpx | Oct 7, 2020 | Oct 26, 2019 |
| Redhat_linux | — | Upgrade libvpx-debugsourceUpgrade libvpx-debuginfoNo solution existsUpgrade libvpx-utilsUpgrade libvpxUpgrade libvpx-utils-debuginfoUpgrade libvpx-devel | Oct 1, 2020 | Sep 27, 2019 |
| Rocky_linux | — | Upgrade libvpx-develUpgrade libvpx-debuginfoUpgrade libvpx-debugsourceUpgrade libvpx | Mar 12, 2024 | Sep 27, 2019 |
| Suse | — | Upgrade libvpx1Upgrade libvpx-develUpgrade libvpx1-32bitUpgrade libvpx4-32bitUpgrade vpx-toolsUpgrade libvpx4 | Jan 21, 2020 | Sep 27, 2019 |
| Ubuntu | — | Upgrade libvpx1 (Ubuntu Pro)Upgrade libvpx3Upgrade libvpx5 | Nov 26, 2019 | Sep 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub