VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 11, 2022· Updated Jun 17, 2026

CVE-2022-36938

CVE-2022-36938

Description

DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Facebook/Redex3 versions
    cpe:2.3:a:facebook:redex:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:facebook:redex:*:*:*:*:*:*:*:*range: <2022-11-04
    • (no CPE)range: <commit 3b44c64
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.