PT-2018-5535
CVE-2017-13248
·
Published
2018-04-04
·
Updated
2018-05-09
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Android versions 6.0 through 8.1
Description:
The issue is caused by an out of bounds write in the
impeg2 idct recon sse42() function due to a missing bounds check. This could lead to remote code execution without requiring additional execution privileges. User interaction is necessary for exploitation.Recommendations:
For Android versions 6.0 through 8.1, update to a version that includes the fix for the issue, as identified by Android ID: A-70349612.
Found an issue in the description? Have something to add? Feel free to write us 👾