GCVE-110-CERTCC-2020-366027

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published January 28, 2020

The Samsung Qmage codec used in the Android Skia library does not properly validate image files. A number of memory corruption vulnerabilities allow an attacker to execute arbitrary code by causing a vulnerable system to parse a Qmage file.

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_direct_report0

certcc-cvss-temporal-env

temporal_score7.8remediation_levelOFreport_confidenceNDenvironmental_score7.82568936576target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND