Security Advisory

CVE-2017-13291

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-04 16:00:00

Last updated 2024-09-17 00:02:21

Assigner google_android

CVSS score not scored

State PUBLISHED

Description

In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71603553.

← Browse all CVEs View on cve.org ↗