Beveiligingsadvies

CVE-2023-20948

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-02-28 00:00:00
Laatst bijgewerkt 2025-03-18 15:16:17
Toegewezen door google_android
CVSS-score 7.5
Status PUBLISHED

Beschrijving

In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-230630526