CVE-2020-0452

CRITICAL

Google Android - Integer Overflow

Title source: rule

Description

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-159625731

Exploits (1)

nomisec WORKING POC

by ShaikUsaf · poc

https://github.com/ShaikUsaf/external_libexif_AOSP10_CVE-2020-0452

View Code ZIP pw:eip

References (4)

[Patch, Vendor Advisory] https://source.android.com/security/bulletin/2020-11-01

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVBD5JRUQPN4LQHTAAJHA3MR5M7YTAC7/

[Third Party Advisory] https://security.gentoo.org/glsa/202011-19

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ELDZR6USD5PR34MRK2ZISLCYJ465FNKN/

Scores

CVSS v3 9.8

EPSS 0.1491

EPSS Percentile 94.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-190 CWE-787

Status published

Products (7)

fedoraproject/fedora 32

fedoraproject/fedora 33

google/android 8.0

google/android 8.1

google/android 9.0

google/android 10.0

google/android 11.0

Published Nov 10, 2020

Tracked Since Feb 18, 2026