CVE-2020-0191

In ih264dupdatedefaultindexlist of ih264ddpbmgr.c, there is a possible out of bounds read due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android...

CVE-2020-0191

CVE-2020-0191 targets Android 10 and is caused by a logic error in ih264d_update_default_index_list() within the Android Media Framework’s H.264 decoder (ih264d_dpb_mgr.c). This results in an out-of-bounds read, enabling potential information disclosure. Exploitation requires user interaction, an...