Out-of-bounds

2023-09-1121:15:00

PRIOn knowledge base

www.prio-n.com

mtppropertyvalue mtpproperty.h uninitialized data local info disclosure user interaction

5.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.0%

JSON

In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	12.1
android	eq	13.0

References

android.googlesource.com/platform/frameworks/av/+/ea6131efa76a0b2a12724ffd157909e2c6fb4036

source.android.com/security/bulletin/2023-09-01