CVE-2017-13292

CVE-2017-13292: vulnerability in Google Inc. Android

Published · Updated

Follow this CVE+ Monitor Android

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-70722061. References: B-V2018010201.
Affected products
Google Inc. · Android
Related CVEs — Google Inc. Android

In the same product, most dangerous first.

CVE-2017-0561—CVE-2017-0561EPSS 29.8%CVE-2017-0781—CVE-2017-0781EPSS 21.5%CVE-2017-13156—CVE-2017-13156EPSS 20.5%CVE-2017-0785—CVE-2017-0785EPSS 12.4%CVE-2016-10277—CVE-2016-10277EPSS 9.8%CVE-2017-13208—CVE-2017-13208EPSS 8.5%