CVE-2017-13313

In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for...

CVE-2017-13313

A denial of service (DoS) vulnerability exists in the Media framework of Google Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0 . The flaw is caused by an incorrect bounds check within the ElementaryStreamQueue::dequeueAccessUnitMPEG4Video function of ESQueue.cpp, which can trigger an inf...