In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libexif | Aug 22, 2024 | Sep 27, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libexifamazon-linux-ami-2-upgrade-libexif-debuginfoamazon-linux-ami-2-upgrade-libexif-develamazon-linux-ami-2-upgrade-libexif-doc | Oct 28, 2020 | Sep 27, 2019 | |
| Centos_linux | — | centos-upgrade-libexifcentos-upgrade-libexif-debuginfocentos-upgrade-libexif-debugsourcecentos-upgrade-libexif-develcentos-upgrade-libexif-doc | Oct 1, 2020 | Sep 27, 2019 |
| Debian | debian-upgrade-libexif | Feb 10, 2020 | Sep 27, 2019 | |
| Freebsd | freebsd-upgrade-package-libexif | Feb 12, 2020 | Feb 11, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-media-libs-libexif | Jul 28, 2020 | Sep 27, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libexif | Feb 22, 2021 | Sep 27, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libexif | Jan 20, 2021 | Sep 27, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libexif | Nov 2, 2020 | Sep 27, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libexif | Aug 31, 2020 | Sep 27, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-image-library-libexif-0-6-21-11-4-21-0-1-69-0 | Jan 19, 2021 | Sep 27, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-libexiforacle-linux-upgrade-libexif-develoracle-linux-upgrade-libexif-doc | Oct 7, 2020 | Dec 1, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-libexifredhat-upgrade-libexif-debuginforedhat-upgrade-libexif-debugsourceredhat-upgrade-libexif-develredhat-upgrade-libexif-doc | Oct 1, 2020 | Sep 27, 2019 | |
| Suse | — | suse-upgrade-libexifsuse-upgrade-libexif-32bitsuse-upgrade-libexif-develsuse-upgrade-libexif-devel-32bitsuse-upgrade-libexif12suse-upgrade-libexif12-32bit | Mar 3, 2020 | Sep 27, 2019 |
| Ubuntu | ubuntu-pro-upgrade-libexif12ubuntu-upgrade-libexif12 | Feb 12, 2020 | Sep 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub