CVE-2017-13228
First published: Mon Feb 05 2018(Updated: )
In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Android | =6.0 | |
| Android | =6.0.1 | |
| Android | =7.0 | |
| Android | =7.1.1 | |
| Android | =7.1.2 | |
| Android | =8.0 | |
| Android | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-13228?
CVE-2017-13228 has a high severity rating due to the potential for remote code execution.
Which software versions are affected by CVE-2017-13228?
CVE-2017-13228 affects Android versions 6.0 through 8.1.
How do I fix CVE-2017-13228?
To fix CVE-2017-13228, update your Android operating system to the latest version provided by Google.
What type of vulnerability is CVE-2017-13228?
CVE-2017-13228 is an out-of-bounds write vulnerability that can lead to remote code execution.
Is user interaction required to exploit CVE-2017-13228?
Yes, user interaction is needed for exploitation of CVE-2017-13228.
- agent/type
- agent/references
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/google
- canonical/android
- version/android/6.0
- version/android/6.0.1
- version/android/7.0
- version/android/7.1.1
- version/android/7.1.2
- version/android/8.0
- version/android/8.1