CVE-2017-13259: High severity Google Android vulnerability

Published Mar 5, 2018

Updated

In functionality implemented in sdpdiscovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68161546.

Affected Software

9 affected components

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Google Android

Event History

Mar 5, 2018

CVE Published

via Android·12:00 AM

Apr 4, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-13259?

The severity of CVE-2017-13259 is classified as high due to its potential for remote information disclosure.

How do I fix CVE-2017-13259?

To fix CVE-2017-13259, users should update their Android device to the latest version provided by Google.

What versions of Android are affected by CVE-2017-13259?

CVE-2017-13259 affects Android versions 5.1.1 through 8.1.

Is user interaction required for exploiting CVE-2017-13259?

No, user interaction is not required for exploiting CVE-2017-13259.

What type of attack does CVE-2017-13259 represent?

CVE-2017-13259 represents a remote information disclosure vulnerability due to out of bounds reads.