CVE-2017-13318

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the readAt function in the mediaserver service of the Android operating system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted application...