vulnerability

Oracle Linux: CVE-2019-9278: ELSA-2020-4766: libexif security, bug fix, and enhancement update (MODERATE) (Multiple Advisories)

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
2019-12-01
Added
2020-10-07
Modified
2024-12-06

Description

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774

Solution(s)

oracle-linux-upgrade-libexiforacle-linux-upgrade-libexif-develoracle-linux-upgrade-libexif-doc

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today