Security Bulletin: IBM MaaS360 Mobile Enterprise Gateway has security vulnerabilities (CVE-2019-2044, CVE-2019-2045)

Summary Two vulnerabilities were identified and remediated in the IBM MaaS360 Mobile Enterprise Gateway. Vulnerability Details CVEID: CVE-2019-20445 DESCRIPTION: Netty could provide weaker than expected security, caused by non-proper handling of Content-Length and Transfer-Encoding in the...

CVE-2019-2044

CVE-2019-2044 affects the Android Media framework, specifically in MakeMP>G4VideoCodecSpecificData within APacketSource.cpp. The issue is an out-of-bounds write caused by an incorrect bounds check, which could allow a remote attacker to execute code in the context of a privileged process in th...