CVE-2020-0181: Integer Overflow
Published Jun 11, 2020
·Updated
In exifdataloaddatathumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145075076
Affected Software
4 affected components
Google Android=10.0
Libexif Project Libexif<0.6.22_p20201105
Fedoraproject Fedora=32
Fedoraproject Fedora=33
Remediation
Event History
Jun 11, 2020
CVE Published
via MITRE·02:43 PM
Data Sourced
via MITRE·02:43 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-0181.
2
What is the severity of CVE-2020-0181?
The severity of CVE-2020-0181 is high with a score of 7.5.
3
How does CVE-2020-0181 impact Android?
CVE-2020-0181 could lead to remote denial of service on Android devices running Android-10.
4
How does CVE-2020-0181 impact Libexif?
CVE-2020-0181 could lead to denial of service in Libexif version up to 0.6.22_p20201105.
5
Are there any known fixes for CVE-2020-0181?
Yes, patches have been released to address the vulnerability in affected software.