In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libexif | Aug 22, 2024 | Sep 27, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libexif-develUpgrade libexif-debuginfoUpgrade libexifUpgrade libexif-doc | Oct 28, 2020 | Sep 27, 2019 |
| Centos_linux | — | Upgrade libexif-develUpgrade libexifUpgrade libexif-docUpgrade libexif-debuginfoUpgrade libexif-debugsource | Oct 1, 2020 | Sep 27, 2019 |
| Debian | — | Upgrade libexif | Feb 10, 2020 | Sep 27, 2019 |
| Freebsd | — | Upgrade libexif | Feb 12, 2020 | Feb 11, 2020 |
| Gentoo Linux | — | Upgrade media-libs/libexif. | Jul 28, 2020 | Sep 27, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libexif | Feb 22, 2021 | Sep 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libexif | Jan 20, 2021 | Sep 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libexif | Nov 2, 2020 | Sep 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libexif | Aug 31, 2020 | Sep 27, 2019 |
| Oracle Solaris | — | Upgrade image/library/libexif to version 0.6.21-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade libexifUpgrade libexif-docUpgrade libexif-devel | Oct 7, 2020 | Dec 1, 2019 |
| Redhat_linux | — | No solution existsUpgrade libexif-debugsourceUpgrade libexif-debuginfoUpgrade libexif-develUpgrade libexif-docUpgrade libexif | Oct 1, 2020 | Sep 27, 2019 |
| Suse | — | Upgrade libexif-develUpgrade libexifUpgrade libexif-devel-32bitUpgrade libexif12-32bitUpgrade libexif-32bitUpgrade libexif12 | Mar 3, 2020 | Sep 27, 2019 |
| Ubuntu | — | Upgrade libexif12Upgrade libexif12 (Ubuntu Pro) | Feb 12, 2020 | Sep 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub