ID CVE-2020-27038
Summary In process of C2SoftVorbisDec.cpp, there is a possible resource exhaustion due to a memory leak. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154302257
References
Vulnerable Configurations
  • cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
    cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 15-12-2020 - 20:06)
Impact:
Exploitability:
CWE CWE-401
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
refmap via4
misc https://source.android.com/security/bulletin/pixel/2020-12-01
Last major update 15-12-2020 - 20:06
Published 15-12-2020 - 17:15
Last modified 15-12-2020 - 20:06
Back to Top