search

ChoeMinji / godot

MIT License
0 stars 0 forks source link

CVE-2019-9325 (Medium) detected in godot3.4.2-stable, godot3.4.2-stable #7

Open mend-bolt-for-github[bot] opened 2 years ago

mend-bolt-for-github[bot] commented 2 years ago

CVE-2019-9325 - Medium Severity Vulnerability

Vulnerable Libraries - godot3.4.2-stable, godot3.4.2-stable

Vulnerability Details

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112001302

Publish Date: 2019-09-27

URL: CVE-2019-9325

CVSS 3 Score Details (6.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: None - Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://bugzilla.redhat.com/show_bug.cgi?id=1789002

Release Date: 2019-10-26

Fix Resolution: v1.8.0

Step up your Open Source Security Game with Mend here