CVE-2017-13199

In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-33846679.
References
Link Resource
http://www.securityfocus.com/bid/102414 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040106 Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2018-01-01 Patch Vendor Advisory
http://www.securityfocus.com/bid/102414 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040106 Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2018-01-01 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*

History

21 Nov 2024, 03:11

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/102414 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/102414 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1040106 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1040106 - Third Party Advisory, VDB Entry
References () https://source.android.com/security/bulletin/2018-01-01 - Patch, Vendor Advisory () https://source.android.com/security/bulletin/2018-01-01 - Patch, Vendor Advisory

Information

Published : 2018-01-12 23:29

Updated : 2024-11-21 03:11


NVD link : CVE-2017-13199

Mitre link : CVE-2017-13199

CVE.ORG link : CVE-2017-13199


JSON object : View

Products Affected

google

  • android
CWE
CWE-755

Improper Handling of Exceptional Conditions