Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Android | unaffected |
|
No data.
No data.
No data available yet.
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.179% probability within 30 days)
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Heap Buffer Overflow in Android Text RTP Payload Encoder Allows Remote Code Execution | |
| Weaknesses | CWE-122 |
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Heap Buffer Overflow in Android Text RTP Payload Encoder Allows Remote Code Execution | |
| Weaknesses | CWE-122 |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. | |
| References |
|
No data.
No weakness.