Beveiligingsadvies

CVE-2017-13178

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-01-12 23:00:00

Laatst bijgewerkt 2024-09-16 22:46:14

Toegewezen door google_android

CVSS-score geen score

Status PUBLISHED

Beschrijving

In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969281.

← Alle CVE's bekijken Bekijk op cve.org ↗