In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade flac | Mar 26, 2024 | Dec 15, 2020 |
| Debian | — | Upgrade flac | Jan 5, 2021 | Dec 15, 2020 |
| Freebsd | — | Upgrade flac | Nov 4, 2022 | May 8, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade flac-libs | Sep 16, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libksbaUpgrade flac-libs | Sep 7, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade flac-libs | Feb 2, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade flac-help | Aug 10, 2021 | Dec 15, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2020 |
| Suse | — | Upgrade flacUpgrade vlc-codec-gstreamerUpgrade vlcUpgrade flac-docUpgrade libvlc5Upgrade libflac8Upgrade libflac-6Upgrade flac-devel-32bitUpgrade libflac8-32bitUpgrade libflac-6-32bitUpgrade vlc-qtUpgrade vlc-vdpauUpgrade vlc-noxUpgrade libvlccore9Upgrade vlc-langUpgrade flac-devel | Dec 25, 2020 | Dec 15, 2020 |
| Ubuntu | — | Upgrade libflac8Upgrade flacUpgrade libflac++6v5 (Ubuntu Pro)Upgrade libflac++6v5Upgrade flac (Ubuntu Pro)Upgrade libflac++6 (Ubuntu Pro)Upgrade libflac8 (Ubuntu Pro) | Nov 22, 2022 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub