CVE-2017-13259

Summary

In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68161546.

Affected Software

VendorProductVersion RangeStatus
Google Inc.Android5.1.1affected
Google Inc.Android6.0affected
Google Inc.Android6.0.1affected
Google Inc.Android7.0affected
Google Inc.Android7.1.1affected
Google Inc.Android7.1.2affected
Google Inc.Android8.0affected
Google Inc.Android8.1affected

Weaknesses

  • Information disclosure

ADP Enrichment

CVE Program Container

Additional References

References