CVE-2020-0034

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-00355.5In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local CVE-2020-00367.8In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could leCVE-2020-00377.5In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infCVE-2020-00387.5In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remoCVE-2020-00397.5In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remoCVE-2020-00417.8In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalaCVE-2020-00424.4In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due to a missing bounds check. This could leadCVE-2020-00434.4In authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local inforCVE-2020-00444.4In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local informationCVE-2020-00456.4In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalatiCVE-2020-00467.8In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead toCVE-2020-00473.3In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio with no additional e
CVE-2020-0034: High severity, CVSS 7.5 | Vulnix