CVE-2017-13228: High severity Google Android vulnerability

Published Feb 5, 2018

Updated

In function ih264drefidxreordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425.

Affected Software

8 affected components

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android

Event History

Feb 5, 2018

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Feb 12, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-13228?

CVE-2017-13228 has a high severity rating due to the potential for remote code execution.

Which software versions are affected by CVE-2017-13228?

CVE-2017-13228 affects Android versions 6.0 through 8.1.

How do I fix CVE-2017-13228?

To fix CVE-2017-13228, update your Android operating system to the latest version provided by Google.

What type of vulnerability is CVE-2017-13228?

CVE-2017-13228 is an out-of-bounds write vulnerability that can lead to remote code execution.

Is user interaction required to exploit CVE-2017-13228?

Yes, user interaction is needed for exploitation of CVE-2017-13228.