CVE-2022-36938
DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, pote...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string index table, potentially allowing remote code execution during processing of a 3rd party Android APK file.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com