First published: Fri Jan 17 2025(Updated: )
In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Credit: security@android.com
Affected Software | Affected Version | How to fix |
---|---|---|
Android | =6.0 | |
Android | =6.0.1 | |
Android | =7.0 | |
Android | =7.1.1 | |
Android | =7.1.2 | |
Android | =8.0 | |
Android | =8.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-13322 has a moderate severity level due to its potential for local denial of service without requiring additional execution privileges.
To fix CVE-2017-13322, users should update their Android devices to the latest software version that includes the security patch.
CVE-2017-13322 affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.
Yes, CVE-2017-13322 can be exploited without user interaction, making it a notable security concern.
The potential impact of CVE-2017-13322 includes the inability to access emergency services, leading to significant consequences during critical situations.