9 matches found
CVE-2021-0484
In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...
CVE-2021-0484
In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...
CVE-2021-0484: Missing Initialization of Resource
In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...
PT-2021-13139
Name of the Vulnerable Software and Affected Versions: Android versions 8.1 through 11 Description: The issue is related to a missing bounds check in the readVector function of IMediaPlayer.cpp, which could lead to a read of uninitialized heap data. This might result in local information disclosu...
Media framework Heap Buffer Overflow DoS
The vulnerability of the readVector function in the iCrypto.cpp component of the Android Media framework arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this functio...
CVE-2018-9499
In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0...
Information disclosure
In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0...
CVE-2018-9499: Use of Uninitialized Resource
In readVector of iCrypto.cpp, there is a possible invalid read due to uninitialized data. This could lead to local information disclosure from the DRM server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0...
PT-2018-1620
Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9.0 Description The issue is related to an invalid read in the readVector function of iCrypto.cpp, potentially leading to local information disclosure from the DRM server without requiring additional execution...