In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174302683
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade flac-develUpgrade flac-libsUpgrade flac | Nov 21, 2022 | Jun 22, 2021 |
| Alpine Linux | — | Upgrade flac | Mar 26, 2024 | Jun 22, 2021 |
| Amazon Linux Ami 2 | — | Upgrade flacUpgrade flac-libsUpgrade flac-develUpgrade flac-debuginfo | Jul 4, 2023 | Jun 22, 2021 |
| Amazon_linux_2023 | — | Upgrade flac-debugsourceUpgrade flac-debuginfoUpgrade flac-libs-debuginfoUpgrade flacUpgrade flac-develUpgrade flac-libs | Feb 17, 2025 | Feb 23, 2022 |
| Centos_linux | — | Upgrade flac-debugsourceUpgrade flac-libsUpgrade flac-libs-debuginfoUpgrade flac-debuginfo | Nov 16, 2022 | Jun 22, 2021 |
| Debian | — | Upgrade flac | Mar 18, 2022 | Jun 22, 2021 |
| Freebsd | — | Upgrade flac | Nov 4, 2022 | Feb 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade flac-help | Jun 14, 2022 | Jun 22, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade flac-libs | May 25, 2022 | Jun 22, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade flac-libs | Apr 26, 2022 | Jun 22, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade flac-libs | Apr 26, 2022 | Jun 22, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade flac-help | Jun 16, 2022 | Jun 22, 2021 |
| Oracle_linux | — | Upgrade flac-develUpgrade flacUpgrade flac-libs | Nov 22, 2022 | Feb 23, 2022 |
| Redhat_linux | — | Upgrade flac-debuginfoUpgrade flac-libs-debuginfoNo solution existsUpgrade flacUpgrade flac-debugsourceUpgrade flac-develUpgrade flac-libs | Nov 16, 2022 | Jun 22, 2021 |
| Rocky_linux | — | Upgrade flac-debugsourceUpgrade flacUpgrade flac-libsUpgrade flac-libs-debuginfoUpgrade flac-develUpgrade flac-debuginfo | Mar 12, 2024 | Jun 22, 2021 |
| Suse | — | Upgrade vlc-vdpauUpgrade vlcUpgrade libflac-6-32bitUpgrade libflac8Upgrade vlc-noxUpgrade libvlc5Upgrade vlc-codec-gstreamerUpgrade flac-devel-32bitUpgrade libvlccore9Upgrade vlc-qtUpgrade flacUpgrade libflac-6Upgrade vlc-langUpgrade flac-docUpgrade libflac8-32bitUpgrade flac-devel | Mar 15, 2022 | Jun 22, 2021 |
| Ubuntu | — | Upgrade libflac8 (Ubuntu Pro)Upgrade flac (Ubuntu Pro)Upgrade libflac++6v5Upgrade flacUpgrade libflac++6v5 (Ubuntu Pro)Upgrade libflac++6 (Ubuntu Pro)Upgrade libflac8 | Nov 22, 2022 | Jun 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub