CVE-2017-13228
CVE-2017-13228
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 feb 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425.
Productos afectados
Google Inc. · Android¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →