CVE-2017-13253: vulnerability in Google Inc. Android
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
25Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.8%
from disclosure to weaponsame day
Published on NVDApr 4
1st PoCMar 12
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-71389378.
Affected products
Google Inc. · Androidpublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/44291unverifiedgithubgithub.com/tamirzb/CVE-2017-13253★ 37cve_referencewww.exploit-db.com/exploits/44291/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Google Inc. Android
In the same product, most dangerous first.