CVE-2017-13315
43Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Actcvss 7.8epss 0.1%
da publicação à arma
Publicada no NVD19 de nov.
VulnCheck12 de abr.
probabilidade de exploração
0.1%top 99% das CVEs
exploração observada
simVulnCheck
In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Google · Android