CVE-2020-0385: Medium severity Google Android vulnerability

Published Sep 8, 2020

Updated

In Parseinsh of easmdls.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote information disclosure in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-150160041

Affected Software

6 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2020-09-01

Event History

Sep 8, 2020

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Sep 17, 2020

CVE Published

via MITRE·03:25 PM

Data Sourced

via MITRE·03:25 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0385?

The severity of CVE-2020-0385 is classified as medium due to the potential for remote information disclosure.

How do I fix CVE-2020-0385?

To fix CVE-2020-0385, ensure that your device is updated to the latest security patch provided by Google.

What versions of Android are affected by CVE-2020-0385?

CVE-2020-0385 affects Android versions 8.0, 8.1, 9.0, 10.0, and 11.0.

Is user interaction required for the exploitation of CVE-2020-0385?

Yes, user interaction is needed for the exploitation of CVE-2020-0385.

What type of vulnerability is CVE-2020-0385?

CVE-2020-0385 is classified as an out of bounds write vulnerability.