CVE-2020-0489

Publication date

2020-12-15 15:56:15

Family

google_android

State

PUBLISHED

Description

In Parse_data of eas_mdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151096540