Lucene search

Elphet and Gong Guang of Alpha Team, Qihoo 360 Technology Co. LtdANDROID:CVE-2017-13276

HistoryApr 01, 2018 - 12:00 a.m.

CVE-2017-13276

2018-04-0100:00:00

Elphet and Gong Guang of Alpha Team, Qihoo 360 Technology Co. Ltd

www.androidvulnerabilities.org

0.001 Low

EPSS

Percentile

49.6%

JSON

In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70637599.

CPENameOperatorVersion
androidlt7.0
androidlt8.0
androidlt7.1.1
androidlt8.1
androidlt7.1.2
androidlt6.0.1
androidlt6.0

Name	Operator	Version
android	lt	7.0
android	lt	8.0
android	lt	7.1.1
android	lt	8.1
android	lt	7.1.2
android	lt	6.0.1
android	lt	6.0

References

android.googlesource.com/platform/external/aac/+/1b9cbed05b4fd376677d67b6442aa30256834ed4

nvd.nist.gov/vuln/data-feeds

source.android.com/security/bulletin/2018-04-01.html

source.android.com/security/overview/acknowledgements

0.001 Low

EPSS

Percentile

49.6%

JSON

Related for ANDROID:CVE-2017-13276