CVE-2017-13313

State: PUBLISHED · Published: 2024-11-15 · Updated: 2024-11-19 · Assigner: google_android

Description

In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resource exhaustion due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

CWE

CWE-787 — CWE-787 Out-of-bounds Write

Affected

Google / Android — v=6 [affected]; v=6.0.1 [affected]; v=7 [affected]; v=8 [affected]; v=8.1 [affected]; v=nyc-mr1-dev [affected]; v=nyc-mr2-dev [affected]

CVSS

(none)

References

https://source.android.com/security/bulletin/2018-05-01

Source

cvelistV5-main/cves/2017/13xxx/CVE-2017-13313.json