CVE-2021-0312

In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow

published January 11, 2021

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-170583712.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01146 · 66.5th percentile
Published
2021-01-11T21:48Z
EPSS history
Timeline
  • 11 JAN 21:48Z
    In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow
    cvelistv5