CVE-2020-0034
libvpx: Out of bounds read in vp8_decode_frame in decodeframe.c
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 2, 2020
Updated · June 27, 2026
Description
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770
Statement
The version shipped with Red Hat Enterprse Linux 8 already contains the commit which fix this issue, thus this version is not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-125 · Out-of-bounds Read