CVE-2017-13315

Summary

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

VendorProductVersion RangeStatus
GoogleAndroid6affected
GoogleAndroid6.0.1affected
GoogleAndroid7affected
GoogleAndroid8affected
GoogleAndroid8.1affected
GoogleAndroidnyc-mr1-devaffected
GoogleAndroidnyc-mr2-devaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References