CVE-2021-0312

In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1,...

CVE-2021-0312

CVE-2021-0312 involves WAVSource::read in WAVExtractor.cpp. Root cause: integer overflow causing an out-of-bounds write. Impact: remote information disclosure without extra execution privileges; requires user interaction to exploit. Affected Android versions: 8.0–11 (Android 8.0, 8.1, 9, 10, 11)....