CVE-2017-13255

Name of the Vulnerable Software and Affected Versions: Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1

Description: The issue is related to an out of bounds write in the process service attr req function of sdp server.c due to a missing bounds check. This could lead to remote code execution without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations: For Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1, update to a version that includes the fix for the issue, as specified by the Android security updates. At the moment, there is no information about a newer version that contains a fix for this vulnerability.