CVE-2019-2223

In ihevcdreflist of ihevcdreflist.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1...

CVE-2019-2223

CVE-2019-2223 is a remote code execution in Android’s Media Framework caused by an out-of-bounds write in ihevcd_ref_list.c due to a missing bounds check. Affected: Android 8.0–10 (per Android Security Bulletin December 2019). Exploitation described in connected sources requires a crafted media f...