Description
In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70637599.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Google Inc. | Android | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2017-4793 | In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds check. This could lead to a remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70637599. |
References
| Link | Providers |
|---|---|
| https://source.android.com/security/bulletin/2018-04-01 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: google_android
Published:
Updated: 2024-09-16T23:36:40.692Z
Reserved: 2017-08-23T00:00:00.000Z
Link: CVE-2017-13276
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-04-04T16:29:00.417
Modified: 2024-11-21T03:11:17.160
Link: CVE-2017-13276
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses