In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Android | 7.0 (including) | 7.0 (including) | |
| Android | 7.1.1 (including) | 7.1.1 (including) | |
| Android | 7.1.2 (including) | 7.1.2 (including) | |
| Android | 8.0 (including) | 8.0 (including) | |
| Android | 8.1 (including) | 8.1 (including) | |
| Android | 9.0 (including) | 9.0 (including) | |
| Red Hat Enterprise Linux 8 | RedHat | libvpx-0:1.7.0-8.el8 | * |
| Aom | Ubuntu | disco | * |
| Aom | Ubuntu | eoan | * |
| Aom | Ubuntu | groovy | * |
| Aom | Ubuntu | hirsute | * |
| Aom | Ubuntu | impish | * |
| Aom | Ubuntu | kinetic | * |
| Aom | Ubuntu | lunar | * |
| Aom | Ubuntu | trusty | * |
| Chromium-browser | Ubuntu | disco | * |
| Firefox | Ubuntu | disco | * |
| Godot | Ubuntu | disco | * |
| Godot | Ubuntu | eoan | * |
| Godot | Ubuntu | groovy | * |
| Godot | Ubuntu | hirsute | * |
| Godot | Ubuntu | impish | * |
| Godot | Ubuntu | kinetic | * |
| Godot | Ubuntu | lunar | * |
| Godot | Ubuntu | mantic | * |
| Godot | Ubuntu | trusty | * |
| Libvpx | Ubuntu | bionic | * |
| Libvpx | Ubuntu | disco | * |
| Libvpx | Ubuntu | trusty | * |
| Qtwebengine-opensource-src | Ubuntu | bionic | * |
| Qtwebengine-opensource-src | Ubuntu | disco | * |
| Qtwebengine-opensource-src | Ubuntu | eoan | * |
| Qtwebengine-opensource-src | Ubuntu | groovy | * |
| Qtwebengine-opensource-src | Ubuntu | hirsute | * |
| Qtwebengine-opensource-src | Ubuntu | impish | * |
| Qtwebengine-opensource-src | Ubuntu | kinetic | * |
| Qtwebengine-opensource-src | Ubuntu | lunar | * |
| Qtwebengine-opensource-src | Ubuntu | mantic | * |
| Qtwebengine-opensource-src | Ubuntu | trusty | * |
| Thunderbird | Ubuntu | disco | * |