CVE-2017-13196: High severity Google Android vulnerability

Published Jan 2, 2018

Updated

In several places in ihevcddecode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63522067.

Affected Software

9 affected components

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android

Remediation

Patch Available

https://source.android.com/security/bulletin/2018-01-01

Event History

Jan 2, 2018

CVE Published

via Android·12:00 AM

Jan 12, 2018

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-13196?

CVE-2017-13196 has been classified as a denial of service vulnerability that can lead to memory leaks.

How do I fix CVE-2017-13196?

To fix CVE-2017-13196, ensure all affected devices are updated to the latest version of Android where the vulnerability has been patched.

Which versions of Android are affected by CVE-2017-13196?

CVE-2017-13196 affects Android versions 5.1.1 to 8.1.

Is user interaction required to exploit CVE-2017-13196?

No, user interaction is not needed for the exploitation of CVE-2017-13196.

What could be the impact of CVE-2017-13196?

The impact of CVE-2017-13196 could result in a remote denial of service affecting critical system processes.