CVE-2022-36938

DexLoader function getstringidxfromdex in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file...

PT-2022-23691 · Redex · Redex

Name of the Vulnerable Software and Affected Versions: Redex versions prior to commit 3b44c64 Description: The issue concerns the DexLoader function get stringidx fromdex in Redex, which can load an out of bound address when loading the string index table. This could potentially allow remote code...