PT-2024-10589 · Google · Android+1

CVE-2017-13319

·

Published

2024-11-27

·

Updated

2024-12-18

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.
Description The issue is related to a possible buffer overread in the pvmp3 get main data size function due to a missing bounds check. This could lead to remote information disclosure of global static variables without needing additional execution privileges. User interaction is not required for exploitation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2017-13319

Affected Products

Android
Pixel