CVE-2017-13253
25Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.9%
from disclosure to weapon0 days
Published on NVDApr 4
1st PoCMar 12
exploitation probability
2.9%top 14% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71389378.
Affected products
Google Inc. · Androidpublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/44291unverifiedgithubgithub.com/tamirzb/CVE-2017-13253★ 37cve_referencewww.exploit-db.com/exploits/44291/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.