CVE-2017-13199

In Bitmap.ccp if Bitmap.nativeCreate fails an out of memory exception is not thrown leading to a java.io.IOException later on. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-33846679.
References
Link Resource
http://www.securityfocus.com/bid/102414 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040106 Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2018-01-01 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-01-12 23:29

Updated : 2024-02-28 16:04


NVD link : CVE-2017-13199

Mitre link : CVE-2017-13199

CVE.ORG link : CVE-2017-13199


JSON object : View

Products Affected

google

  • android
CWE
CWE-755

Improper Handling of Exceptional Conditions