Possible Out of Bounds Write in String16.cpp Could Lead to Local Escalation of Privilege
CVE-2017-13323

7.8HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
27 November 2024

What is CVE-2017-13323?

The vulnerability occurs in the String16 component of String16.cpp where an out of bounds write can happen due to an integer overflow. This weakness allows local escalation of privilege in an unprivileged process, meaning that an attacker can exploit this flaw without the need for additional execution privileges. Importantly, user interaction is not required for exploitation, making this a significant concern for users of the affected Android products. It is crucial for users and administrators to be aware of this vulnerability to ensure their systems remain secure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Android 6

Android 6.0.1

Android 7

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.