CVE-2020-0470

Vulnerability

CVE-2020-0470 is an out-of-bounds write vulnerability in the extend_frame_highbd function of restoration.c within Android's media framework. The issue occurs during processing of crafted media files, leading to a heap buffer overflow. Affected versions are Android 10 and Android 11 [1].

Exploitation

Exploitation requires user interaction, such as opening a specially crafted media file. An attacker with no additional execution privileges can trigger the overflow remotely by enticing a user to process the malicious file. The specific sequence involves the vulnerable code path in extend_frame_highbd being reached during restoration of high-bit-depth frames [1].

Impact

Successful exploitation results in remote information disclosure. The attacker can read out-of-bounds heap memory, potentially exposing sensitive data from the device's memory. No additional execution privileges are gained beyond the initial context [1].

Mitigation

Android released security patches as part of the December 2020 Security Bulletin. Devices with a security patch level of 2020-12-05 or later are protected. Users should apply the update from their device manufacturer or via Android updates. No workarounds are available other than installing the patch [1].