First published: Mon Feb 05 2018(Updated: )
In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62851602.
Credit: security@android.com
Affected Software | Affected Version | How to fix |
---|---|---|
Google Android | =5.1.1 | |
Google Android | =6.0 | |
Google Android | =6.0.1 | |
Google Android | =7.0 | |
Google Android | =7.1.1 | |
Google Android | =7.1.2 | |
Google Android | =8.0 | |
Google Android | =8.1 | |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-13233 is considered a moderate severity vulnerability that can cause temporary denial of service.
To mitigate CVE-2017-13233, users should upgrade to the latest version of Android, which includes patches for this vulnerability.
CVE-2017-13233 affects Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.
Yes, user interaction is required to exploit CVE-2017-13233 and trigger the resource exhaustion.
Exploitation of CVE-2017-13233 can lead to a temporary denial of service on affected Android devices.