CVE-2020-0168

CVE-2020-0168 affects Android 10, with a vulnerability in the Media Framework where impeg2_fmt_conv_yuv420p_to_yuv420sp_uv in impeg2_format_conv.c can trigger an out-of-bounds write due to a missing bounds check. This can enable remote code execution; exploitation is described as requiring user i...

CVE-2018-9497

CVE-2018-9497 affects Android’s media framework. Affected component: the IMPEG-2 decoder, specifically in impeg2_fmt_conv_yuv420p_to_yuv420sp_uv_av8 within impeg2_format_conv.s, where a missing bounds check can cause an out-of-bounds write. This could lead to remote code execution with no additio...