In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.
History

Wed, 18 Dec 2024 21:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-190
CPEs cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*
cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*

Fri, 29 Nov 2024 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google android
Google pixel
Weaknesses CWE-787
CPEs cpe:2.3:h:google:pixel:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Vendors & Products Google
Google android
Google pixel
Metrics cvssV3_1

{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 27 Nov 2024 21:45:00 +0000

Type Values Removed Values Added
Description In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published: 2024-11-27T21:35:53.233Z

Updated: 2024-11-29T21:42:26.397Z

Reserved: 2017-08-23T00:00:00.000Z

Link: CVE-2017-13323

cve-icon Vulnrichment

Updated: 2024-11-29T21:36:56.220Z

cve-icon NVD

Status : Analyzed

Published: 2024-11-27T22:15:04.983

Modified: 2024-12-18T20:33:03.693

Link: CVE-2017-13323

cve-icon Redhat

No data.