Home Embedded Vulns General Vulns

CVE-2020-0020

MEDIUM 5.5

Our Analysis: Environment Specific

Our model has classified this vulnerability as relevant to Environment Specific Systems, helping your team prioritize efforts effectively.

Published Date February 13, 2020
Last Modified November 21, 2024
CVSS Vector Not Available

Description

In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-143118731

Potentially Affected Vendors