Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-9341 EUVD-2018-20935GHSA-849w-8f8x-v945

In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This could lead to remote arb…

Published Nov 19, 2024 · Updated Nov 20, 2024 · Assigned by google_android

Description

In impeg2d_mc_fullx_fully of impeg2d_mc.c there is a possible out of bound write due to missing bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 6, 6.0.1, 7, 8, 8.1, nyc-mr1-dev, nyc-mr2-dev —

References