Lucene search
Chi Zhang and Mingjian Zhou (@Mingjian_Zhou) of C0RE TeamANDROID:CVE-2017-13178HistoryJan 01, 2018 - 12:00 a.m.
CVE-2017-13178
2018-01-0100:00:00
Chi Zhang and Mingjian Zhou (@Mingjian_Zhou) of C0RE Team
www.androidvulnerabilities.org
15
EPSS
0.006
Percentile
78.9%
In the initDecoder function of SoftAVCDec, there is a possible out-of-bounds write to mCodecCtx due to a use after free when buffer allocation fails. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-66969281.
Related
cvelist
cvelist
CVE-2017-13178
2018-01-12 23:00:00
nvd
nvd
CVE-2017-13178
2018-01-12 23:29:00
prion
prion
Design/Logic Flaw
2018-01-12 23:29:00
cve
cve
CVE-2017-13178
2018-01-12 23:29:00