CVE-2017-13275: Medium severity Google Android vulnerability
Published Apr 2, 2018
·Updated
In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-70808908.
Affected Software
3 affected components
Google Android=8.0
Google Android=8.1
Google Android
Event History
Apr 2, 2018
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Apr 4, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
Which devices are affected?
The affected product is Google Android running versions 8.0 or 8.1.
2
What does an attacker need to exploit this issue?
Exploitation is local, requires user interaction, and does not require additional privileges. The vulnerability can disclose information through an out-of-bounds read.
3
How can I identify this issue in Android tracking and source records?
The Android issue identifier is A-70808908. The affected code is getVSCoverage in CmapCoverage.cpp.