CVE Database
/

CVE-2019-2126

Back to search

CVE-2019-2126

Published: Aug 20, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.

VendorProductVersions

n/a

Android

affected
Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9

References

USN-4199-1
vendor-advisory
x_refsource_UBUNTU
FEDORA-2020-65eac1b48b
vendor-advisory
x_refsource_FEDORA
FEDORA-2020-6cd410d9e4
vendor-advisory
x_refsource_FEDORA
openSUSE-SU-2020:0105
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now