Log in Start free

Vulnerability · Published Nov 10, 2020 · Assigned by google_android

CVE-2020-0452

Critical 9.8

In plain English

A critical-severity security flaw in Android. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.3% (higher than 89% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)3.3%top 11.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC

Official description

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8libexif0.6.22-5.el8_3ALSA-2020:5393
AlmaLinux:8libexif-devel0.6.22-5.el8_3ALSA-2020:5393
Alpine:v3.20libexif0.6.23-r0ALPINE-CVE-2020-0452
Alpine:v3.21libexif0.6.23-r0ALPINE-CVE-2020-0452
Alpine:v3.22libexif0.6.23-r0ALPINE-CVE-2020-0452
Alpine:v3.23libexif0.6.23-r0ALPINE-CVE-2020-0452
Alpine:v3.24libexif0.6.23-r0ALPINE-CVE-2020-0452
Debian:12libexif0.6.22-3DEBIAN-CVE-2020-0452
Debian:13libexif0.6.22-3DEBIAN-CVE-2020-0452
Debian:14libexif0.6.22-3DEBIAN-CVE-2020-0452
Rocky Linux:8libexif0:0.6.22-5.el8_3RLSA-2020:5393

Affected products (as reported)

VendorProductVersions
n/a Android Android-8.1 Android-9 Android-10 Android-11 Android-8.0

References