Beveiligingsadvies

CVE-2017-13181

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-01-12 23:00:00

Laatst bijgewerkt 2024-09-16 23:26:21

Toegewezen door google_android

CVSS-score geen score

Status PUBLISHED

Beschrijving

In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67864232.

← Alle CVE's bekijken Bekijk op cve.org ↗