Skip to content
8.4 High

CVE-2017-13323 In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow

Description

In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products and versions

Product Affected versions Fixed in
Android 8.1 No fix stated
Android 8 No fix stated
Android 7.1 7.1.1 → 7.1.2 No fix stated
Android 7 No fix stated
Android 6.0.1 No fix stated
Android 6 No fix stated
pixel 2018 earliest → < 2018-05-05 2018-05-05
The 1729 CVEs of Android →
Track this CVE