In exifentryget_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-147140917
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.6.21-1ubuntu1+esm5", "binary_name": "libexif-dev" }, { "binary_version": "0.6.21-1ubuntu1+esm5", "binary_name": "libexif12" }, { "binary_version": "0.6.21-1ubuntu1+esm5", "binary_name": "libexif12-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.6.21-2ubuntu0.5", "binary_name": "libexif-dev" }, { "binary_version": "0.6.21-2ubuntu0.5", "binary_name": "libexif12" }, { "binary_version": "0.6.21-2ubuntu0.5", "binary_name": "libexif12-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.6.21-4ubuntu0.5", "binary_name": "libexif-dev" }, { "binary_version": "0.6.21-4ubuntu0.5", "binary_name": "libexif-doc" }, { "binary_version": "0.6.21-4ubuntu0.5", "binary_name": "libexif12" }, { "binary_version": "0.6.21-4ubuntu0.5", "binary_name": "libexif12-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "0.6.21-6ubuntu0.3", "binary_name": "libexif-dev" }, { "binary_version": "0.6.21-6ubuntu0.3", "binary_name": "libexif-doc" }, { "binary_version": "0.6.21-6ubuntu0.3", "binary_name": "libexif12" }, { "binary_version": "0.6.21-6ubuntu0.3", "binary_name": "libexif12-dbgsym" } ] }