CVE-2020-0103

—

CVSS 3.1

9.8 critical

EPSS

2%p74

Published

May 14, 2020 (May 14, 2020)

Modified

Jun 17, 2026

Description

In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-148107188

Vendors: google
Products: android
Weakness: CWE-763, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.