CVE-2017-13285

CVE-2017-13285 affects Android and is rooted in the SvoxSsmlParser implementation (svox_ssml_parser.cpp), where an out-of-bounds write can occur due to an uninitialized buffer. This can enable remote code execution in an unprivileged process with no user interaction. The Android Security Bulletin...