← CVE Intelligence

CVE-2017-13228

Google Inc. / Android PUBLISHED

Description (CNA)

In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425.

Affected (CNA)

Vendor / productVersions
Google Inc. / Androidaffected 6.0; affected 6.0.1; affected 7.0; affected 7.1.1; affected 7.1.2; affected 8.0; affected 8.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.