CVE-2017-13249

2018-03-0100:00:00

Vasily Vasiliev

www.androidvulnerabilities.org

0.001 Low

EPSS

Percentile

45.7%

JSON

In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70399408.

CPENameOperatorVersion
androidlt7.0
androidlt8.0
androidlt7.1.1
androidlt8.1
androidlt7.1.2
androidlt6.0.1
androidlt6.0

Name	Operator	Version
android	lt	7.0
android	lt	8.0
android	lt	7.1.1
android	lt	8.1
android	lt	7.1.2
android	lt	6.0.1
android	lt	6.0

References

android.googlesource.com/platform/external/libmpeg2/+/9449ef411f32e2948190f9451726eb558996e8d3

nvd.nist.gov/vuln/data-feeds

source.android.com/security/bulletin/2018-03-01.html

source.android.com/security/overview/acknowledgements

0.001 Low

EPSS

Percentile

45.7%

JSON

Related for ANDROID:CVE-2017-13249