Skip to content
OpenAdvisories
High · 7.5 CVE-2023-20948 EUVD-2023-25116GHSA-gh94-pg28-7rm2

In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to rem…

Published Feb 28, 2023 · Updated Mar 18, 2025 · Assigned by google_android

Description

In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L Android-13Android ID: A-230630526

Affected products

VendorProductAffectedFixed
— Android Android-12 Android-12L Android-13 —

Advisories 1

References