CVE-2017-13238

In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Androi...

CVE-2017-13238

CVE-2017-13238 corresponds to an information-disclosure issue in the HTC Android bootloader (XBLRamDump in the Bootloader). In XBLRamDump mode a debug feature can dump memory contents, enabling local information disclosure for an attacker with physical access and without additional privileges or ...