Google Android up to 9.0 Media Server APacketSource.cpp G4VideoCodecSpecificData out-of-bounds write

Summaryinfo

A vulnerability described as critical has been identified in Google Android up to 9.0. Affected is the function G4VideoCodecSpecificData of the file APacketSource.cpp of the component Media Server. The manipulation results in out-of-bounds write. This vulnerability is identified as CVE-2019-2044. The attack can be executed remotely. There is not any exploit available. Applying a patch is advised to resolve this issue.

Detailsinfo

A vulnerability classified as critical has been found in Google Android up to 9.0 (Smartphone Operating System). Affected is the function G4VideoCodecSpecificData of the file APacketSource.cpp of the component Media Server. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. CWE is classifying the issue as CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

In MakeMP>G4VideoCodecSpecificData of APacketSource.cpp, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-123701862

The bug was discovered 05/06/2019. The weakness was released 05/08/2019 (Website). The advisory is shared for download at source.android.com. This vulnerability is traded as CVE-2019-2044 since 12/10/2018. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $5k-$25k (estimation calculated on 06/08/2020). It is expected to see the exploit prices for this product increasing in the near future.

The vulnerability was handled as a non-public zero-day exploit for at least 2 days. During that time the estimated underground price was around $25k-$100k.

Applying a patch is able to eliminate this problem.

Entries connected to this vulnerability are available at VDB-134453, VDB-134495, VDB-134497 and VDB-134498. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

Version

• 7.0
• 7.1.1
• 7.1.2
• 8.0
• 8.1
• 9.0

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion