Skip to content
OpenAdvisories
Unscored CVE-2020-0393 EUVD-2020-1896GHSA-68pq-529c-5jqg

In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…

Published Sep 17, 2020 · Updated Aug 4, 2024 · Assigned by google_android

Description

In decrypt and decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-154123412

Affected products

VendorProductAffectedFixed
— Android Android-9 Android-10 Android-11 —

References