{"id":"CVE-2020-0034","aliases":["ALPINE-CVE-2020-0034","DEBIAN-CVE-2020-0034","DLA-2136-1","DLA-2829-1","EUVD-2020-1542","GHSA-96m3-53rw-386g","RHSA-2020:3876","SUSE-SU-2020:1297-1","SUSE-SU-2020:1297-2","SUSE-SU-2021:4168-1","UBUNTU-CVE-2020-0034","USN-5637-1","openSUSE-SU-2020:0680-1","openSUSE-SU-2024:11680-1"],"status":"published","title":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper...","description":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01945,"percentile":0.8032,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-20"],"published":"2020-03-09T00:00:00Z","modified":"2026-11-03T06:31:39Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libvpx","fixed_in":["1.8.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libvpx","fixed_in":["1.7.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvpx","fixed_in":["1.7.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvpx","fixed_in":["1.7.0-3"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libvpx","fixed_in":["1.3.0-3+deb8u3"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"libvpx","fixed_in":["1.6.1-3+deb9u3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libvpx","fixed_in":["1.6.1-6.6.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"libvpx","fixed_in":["1.6.1-6.6.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libvpx","fixed_in":["1.6.1-6.6.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"libvpx","fixed_in":["1.6.1-6.6.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"libvpx","fixed_in":["1.6.1-6.6.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"libvpx","fixed_in":["1.6.1-6.6.8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libvpx","fixed_in":["1.3.0-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libvpx","fixed_in":["1.3.0-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libvpx","fixed_in":["1.3.0-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libvpx","fixed_in":["1.3.0-3.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvpx","fixed_in":["1.3.0-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvpx","fixed_in":["1.5.0-2ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"libvpx","fixed_in":["1.6.1-lp151.5.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libvpx","fixed_in":["1.11.0-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-3+deb8u3"}]}],"versions":["1.3.0-3","1.3.0-3+deb8u1","1.3.0-3+deb8u2"]},{"source":"osv","ecosystem":"Debian:9","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-3+deb9u3"}]}],"versions":["1.6.1-3","1.6.1-3+deb9u1","1.6.1-3+deb9u2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvpx-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvpx-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvpx-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvpx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvpx-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvpx-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-8.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-6.6.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-6.6.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-6.6.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-6.6.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-6.6.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-6.6.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-3.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-2ubuntu0.1~esm2"}]}],"versions":["1.2.0-2","1.3.0-1","1.3.0-2","1.3.0-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu1.1+esm1"}]}],"versions":["1.4.0-4","1.5.0-2","1.5.0-2ubuntu1","1.5.0-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-2ubuntu0.1~esm2"}]}],"versions":["1.2.0-2","1.3.0-1","1.3.0-2","1.3.0-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-2ubuntu1.1+esm1"}]}],"versions":["1.4.0-4","1.5.0-2","1.5.0-2ubuntu1","1.5.0-2ubuntu1.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-lp151.5.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libvpx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-3.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/2020-03-01","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00048.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00024.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0034","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-96m3-53rw-386g"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-0034","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-0034","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3876","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1769657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813000","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3876.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-0393","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-0393","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0393","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9232","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9232","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9433","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9433","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9433","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-0034","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-0034","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201297-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1166066","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-0034","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201297-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20214168-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-0034","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5637-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TCLO6H4TMYC4OPEGZQNYZIQBWIOHFIVS/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-0034","description":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770","status":"published","published":"2020-03-10T19:56:04Z","modified":"2024-08-04T05:47:40.786Z","updated_at":"2026-11-02T14:35:59.434367Z"}],"euvd":[{"id":"EUVD-2020-1542","description":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770","status":"published","published":"2020-03-10T19:56:04Z","modified":"2024-08-04T05:47:40Z","updated_at":"2026-11-03T03:08:21.907505Z"}],"ghsa":[{"id":"GHSA-96m3-53rw-386g","title":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper...","description":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770","status":"published","published":"2022-05-24T17:10:38Z","modified":"2024-04-04T02:48:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-20","CWE-125"],"updated_at":"2026-11-02T14:56:12.154453Z"}],"nvd":[{"id":"CVE-2020-0034","description":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770","status":"published","published":"2020-03-10T20:15:20.93Z","modified":"2026-06-17T02:45:06.603Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:C/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:55.32877Z"}],"osv":[{"id":"ALPINE-CVE-2020-0034","description":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770","status":"published","published":"2020-03-10T20:15:20.93Z","modified":"2026-11-03T06:31:39.31380275Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2020-0034","description":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770","status":"published","published":"2020-03-10T20:15:20.93Z","modified":"2026-03-14T09:42:09.762469Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-0034","description":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770","status":"published","published":"2020-03-10T20:15:20.93Z","modified":"2026-10-26T12:00:05.865857101Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:32.57265Z"},{"id":"RHSA-2020:3876","title":"Red Hat Security Advisory: libvpx security update","status":"published","published":"2024-09-16T03:36:58Z","modified":"2026-06-27T10:11:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2020-0034","description":"In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770","status":"published","published":"2020-03-10T20:15:00Z","modified":"2026-04-22T12:24:43.289878Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"DLA-2136-1","title":"libvpx - security update","status":"published","published":"2020-03-09T00:00:00Z","modified":"2026-03-09T01:21:12.838583Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2829-1","title":"libvpx - security update","status":"published","published":"2021-11-27T00:00:00Z","modified":"2026-03-09T01:18:46.152589Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2020:0680-1","title":"Security update for libvpx","description":"This update for libvpx fixes the following issues:\n\n- CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames (bsc#1166066).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-05-22T16:16:50Z","modified":"2026-02-04T04:17:36.233104Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11680-1","title":"libvpx-devel-1.11.0-3.1 on GA media","description":"These are all security issues fixed in the libvpx-devel-1.11.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:11:12.888056Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:1297-1","title":"Security update for libvpx","description":"This update for libvpx fixes the following issues:\n\n- CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames (bsc#1166066).\n","status":"published","published":"2020-05-18T05:42:28Z","modified":"2026-02-04T03:43:05.890674Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1297-2","title":"Security update for libvpx","description":"This update for libvpx fixes the following issues:\n\n- CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames (bsc#1166066).\n","status":"published","published":"2020-07-08T07:56:16Z","modified":"2026-02-04T04:38:57.028293Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2021:4168-1","title":"Security update for libvpx","description":"This update for libvpx fixes the following issues:\n\n- CVE-2020-0034: Fixed out-of-bounds read on truncated key frames (bsc#1166066)\n","status":"published","published":"2021-12-23T08:51:44Z","modified":"2026-02-04T04:36:07.868971Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-5637-1","title":"libvpx vulnerability","description":"It was discovered that libvpx incorrectly handled certain WebM media\nfiles. A remote attacker could use this issue to crash an application\nusing libvpx under certain conditions, resulting in a denial of service.\n","status":"published","published":"2022-09-26T13:31:39Z","modified":"2026-06-29T13:49:41.340921302Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}