Remote code execution

2022-11-1100:15:00

PRIOn knowledge base

www.prio-n.com

dexloader

get_stringidx_fromdex

redex

out of bound address

android apk

nvd

9.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file.

CPENameOperatorVersion
redexeq< 2022114

CPE	Name	Operator	Version
	redex	eq	< 2022114

References

github.com/facebook/redex/commit/3b44c640346b77bfb7ef36e2413688dd460288d2