Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-9353 EUVD-2018-20947GHSA-fvc5-85r6-6h2v

In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bounds check. This co…

Published Nov 27, 2024 · Updated Nov 29, 2024 · Assigned by google_android

Description

In ihevcd_parse_slice_data of ihevcd_parse_slice.c there is a possible heap buffer out of bound read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 7, 7.1.1, 7.1.2, 8, 8.1 —

References