CVE-2017-13257

State: PUBLISHED · Published: 2018-04-04 · Updated: 2024-09-16 · Assigner: google_android

Description

In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67110692.

CWE

(none)

Affected

Google Inc. / Android — v=5.1.1 [affected]; v=6.0 [affected]; v=6.0.1 [affected]; v=7.0 [affected]; v=7.1.1 [affected]; v=7.1.2 [affected]; v=8.0 [affected]; v=8.1 [affected]

CVSS

(none)

References

https://source.android.com/security/bulletin/2018-03-01 x_refsource_CONFIRM
http://www.securityfocus.com/bid/103253 vdb-entry, x_refsource_BID

Source

cvelistV5-main/cves/2017/13xxx/CVE-2017-13257.json