CVE-2017-13312: Input Validation
In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13312?
CVE-2017-13312 is classified as a high severity vulnerability due to the potential for local escalation of privilege.
How do I fix CVE-2017-13312?
To fix CVE-2017-13312, update to the latest security patch provided by Google for Android versions affected by this vulnerability.
What kind of attack does CVE-2017-13312 allow?
CVE-2017-13312 allows an attacker to initiate activities with system privileges without needing additional execution privileges.
On which Android versions does CVE-2017-13312 impact?
CVE-2017-13312 primarily affects Android 8.0, among other potentially impacted versions.
What component is affected by CVE-2017-13312?
CVE-2017-13312 affects the createFromParcel method in the MediaCas.java component.