CVE-2017-13238

Summary

In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-64610940.

Affected Software

VendorProductVersion RangeStatus
Google Inc.AndroidAndroid kernelaffected

Weaknesses

  • Information disclosure

ADP Enrichment

CVE Program Container

Additional References

References