In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade flac | Mar 26, 2024 | Dec 15, 2020 |
| Debian | — | Upgrade flac | Jan 5, 2021 | Dec 15, 2020 |
| Freebsd | — | Upgrade flac | Nov 4, 2022 | May 8, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade flac-libs | Sep 16, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libksbaUpgrade flac-libs | Sep 7, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade flac-libs | Feb 2, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade flac-help | Aug 10, 2021 | Dec 15, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 15, 2020 |
| Suse | — | Upgrade libflac8Upgrade flacUpgrade flac-docUpgrade vlcUpgrade libvlc5Upgrade vlc-codec-gstreamerUpgrade flac-develUpgrade libflac-6-32bitUpgrade vlc-qtUpgrade libflac8-32bitUpgrade vlc-vdpauUpgrade libflac-6Upgrade flac-devel-32bitUpgrade vlc-langUpgrade libvlccore9Upgrade vlc-nox | Dec 25, 2020 | Dec 15, 2020 |
| Ubuntu | — | Upgrade libflac++6v5 (Ubuntu Pro)Upgrade libflac8Upgrade flacUpgrade libflac++6v5Upgrade libflac++6 (Ubuntu Pro)Upgrade flac (Ubuntu Pro)Upgrade libflac8 (Ubuntu Pro) | Nov 22, 2022 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub