Skip to content
Sign in
Not rated

CVE-2017-13176 In the parseURL function of URLStreamHandler, there is improper input validation of the host field

Description

In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that could enable bypassing user interaction requirements with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68341964.

Affected products and versions

Product Affected versions Fixed in
Android 8.1 No fix stated
Android 8.0 No fix stated
Android 7.1 7.1.1 → 7.1.2 No fix stated
Android 7.0 No fix stated
Android 6.0 6.0 → 6.0.1 No fix stated
Android 5.1.1 No fix stated

Other CVEs of Android

The 960 CVEs of Android →
CVE-2018-9569 In impd_init_drc_decode_post_config of impd_drc_gain_decoder.c there is a possible out-of-bound write due to incorrect… Not rated CVE-2018-9577 In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to… Not rated CVE-2018-9519 In easelcomm_hw_build_scatterlist, there is a possible out of bounds write due to a race condition Not rated CVE-2018-9517 In pppol2tp_connect, there is possible memory corruption due to a use after free Not rated
Track this CVE