NetSight
critical9.0

CVE-2021-25383

An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrar…

Impact

An improper input validation vulnerability in scmn_mfal_read() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 8.1, 9.0, 10.0, 11.0

Weakness classification

References