Medium · 6.5 CVE-2017-13320 EUVD-2017-4837GHSA-485v-466m-9mjv

In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with…

Published Nov 27, 2024 · Updated Nov 29, 2024 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead to Remote DoS with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products

Vendor	Product	Affected	Fixed
Google	Android	7, 7.1.1, 7.1.2, 8, 8.1	—

References

https://source.android.com/docs/security/bulletin/pixel/2018-05-01