CVE-2017-13265: High severity android vulnerability
Published Apr 4, 2018
·Updated
A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423.
Affected Software
5 affected components
Google Android=7.0
Google Android=7.1.1
Google Android=7.1.2
Google Android=8.0
Google Android=8.1
Event History
Apr 4, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The CVSS vector lists network attack access, low complexity, no privileges required, and no user interaction required.
2
What security impact is indicated if the issue is exploited?
The issue is described as an elevation-of-privilege vulnerability. The CVSS metrics indicate low impacts to confidentiality, integrity, and availability.
3
Which Android releases are identified as affected?
The listed affected versions are Android 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.