Out-of-bounds read in Google Android - CVE-2020-0034

Vulnerability identifier: #VU33340

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-0034

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to improper input validation when processing files. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Google Android
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server
Ubuntu
Opensuse
libvpx (Alpine package)
libvpx-debugsource
libvpx1-32bit
libvpx1-debuginfo-32bit
vpx-tools
vpx-tools-debuginfo
libvpx-devel
libvpx1
libvpx1-debuginfo
libvpx (Red Hat package)
libvpx3 (Ubuntu package)
libvpx1 (Ubuntu package)
VMware Tanzu Operations Manager

Install update from vendor's website.

libvpx-debugsource - update to 1.3.0-3.9.1
libvpx1-32bit - update to 1.3.0-3.9.1
libvpx1-debuginfo-32bit - update to 1.3.0-3.9.1
vpx-tools - update to 1.3.0-3.9.1
vpx-tools-debuginfo - update to 1.3.0-3.9.1
libvpx-devel - update to 1.3.0-3.9.1
libvpx1 - update to 1.3.0-3.9.1
libvpx1-debuginfo - update to 1.3.0-3.9.1
libvpx (Red Hat package) - update to 1.3.0-8.el7
libvpx3 (Ubuntu package) - update to 1.5.02ubuntu1.1+esm1
libvpx1 (Ubuntu package) - update to 1.5.02ubuntu1.1+esm1
VMware Tanzu Operations Manager - addressed in versions 2.7.25, 2.8.16, 2.9.12, 2.10.39

• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00048.html
• https://source.android.com/security/bulletin/2020-03-01

• Out-of-bounds read in Google, Google Android
• OpenSUSE Linux update for libvpx
• Out-of-bounds read in libvpx (Alpine package)
• Red Hat Enterprise Linux 7 update for libvpx
• SUSE update for libvpx
• Ubuntu update for libvpx
• VMware Tanzu Operations Manager update for libvpx