Description
In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71361451.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Google Inc. | Android | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2017-4797 | In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71361451. |
References
| Link | Providers |
|---|---|
| https://source.android.com/security/bulletin/2018-04-01 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: google_android
Published:
Updated: 2024-09-17T01:11:04.748Z
Reserved: 2017-08-23T00:00:00.000Z
Link: CVE-2017-13280
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-04-04T16:29:00.633
Modified: 2024-11-21T03:11:17.657
Link: CVE-2017-13280
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses