CVE Database
/

CVE-2022-36938

Back to search

CVE-2022-36938

Published: Nov 10, 2022

Modified: May 1, 2025

PUBLISHED

Description

DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file.

VendorProductVersions

Facebook

Redex

affected
unspecified - < 3b44c64

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now