CVE-2017-13228

CVE-2017-13228 affects Android (versions 6.0–8.1) via an out-of-bounds write in libavc ih264d_ref_idx_reordering caused by modCount defined as an unsigned char. This can lead to remote code execution with user interaction; CVSS indicates HIGH impact. Patches are described in the Android Security ...