CVE-2020-0406

—

CVSS 3.1

7.8 high

EPSS

<1%p36

Published

Sep 17, 2020 (Sep 17, 2020)

Modified

Jun 17, 2026

Description

In libmpeg2dec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if another exploit allowed this to be triggered with different parameters, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137794014

Vendors: google
Products: android
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.