Lucene search

K
osvGoogleOSV:ASB-A-203938029
HistoryFeb 01, 2022 - 12:00 a.m.

resourcefile_fuzzer: Heap-buffer-overflow in android::LoadedPackage::Load

2022-02-0100:00:00
Google
osv.dev
16
android
loadedpackage::load
bounds check
local information disclosure
apk
user interaction

EPSS

0.001

Percentile

18.0%

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

0.001

Percentile

18.0%

Related for OSV:ASB-A-203938029