CVE-2020-0458: Integer Overflow
In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/system/mediato a version that resolves this vulnerability.Fixed in 8.0:2020-12-01 - Upgrade
Upgrade
android/platform/system/mediato a version that resolves this vulnerability.Fixed in 8.1:2020-12-01 - Upgrade
Upgrade
android/platform/system/mediato a version that resolves this vulnerability.Fixed in 9:2020-12-01 - Upgrade
Upgrade
android/platform/system/mediato a version that resolves this vulnerability.Fixed in 10:2020-12-01
Event History
Frequently Asked Questions
What is the severity of CVE-2020-0458?
CVE-2020-0458 has a high severity rating as it can lead to remote code execution.
How do I fix CVE-2020-0458?
To fix CVE-2020-0458, ensure that your Android device is updated to the latest security patches provided by Google.
What versions of Android are affected by CVE-2020-0458?
CVE-2020-0458 affects Android versions 8.0, 8.1, 9.0, and 10.0.
What are the implications of CVE-2020-0458 exploitation?
Exploitation of CVE-2020-0458 could potentially allow an attacker to execute arbitrary code remotely without needing additional privileges.
Is user interaction required for CVE-2020-0458 exploitation?
Yes, user interaction is needed for the exploitation of CVE-2020-0458.