CVE-2017-13266

CVE-2017-13266 affects Android and is caused by a missing bounds check in the function avrc_pars_vendor_cmd of avrc_pars_tg.cc , leading to possible stack corruption. The consequence is remote code execution with no additional privileges and no user interaction required. Affected versions include...