PT-2017-3581
CVE-2017-13185
·
Publicado
2017-09-15
·
Atualizado
2018-01-25
Descrição por
CVSS 3.1
9.1
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Android versions 7.0, 7.1.1, 7.1.2, 8.0
Description:
The issue is related to an information disclosure vulnerability in the Android media framework, specifically in the libhevc library. It involves insufficient state checking, which could allow a remote attacker to cause a denial of service.
Recommendations:
For Android versions 7.0, 7.1.1, 7.1.2, 8.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾