CVE-2022-20496

In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20496

creationtimestamp| type| source ---|---|--- 2022-12-13 18:21:48+00:00| seen| https://t.me/cibsecurity/54403...

CVE-2022-20496

In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20496

CVE-2022-20496 affects Android’s media framework via a vulnerability in the setDataSource function of initMediaExtractor.cpp. The issue is caused by a use-after-free, which could allow arbitrary code execution and/or local information disclosure without user interaction. Affected products include...