CVE-2017-0842 — Improper Restriction of Operations within the Bounds of a Memory Buffer in INC Android

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources

Severity

7.8HIGHNVD

EPSS

0.0%

top 96.61%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google INC Android Google Android

Timeline

PublishedNov 16

Latest updateMay 13

Description

An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37502513.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDgoogle/android6 versions+5

▶CVEListV5google_inc/android6 versions+5

Patches

Patch: source.android.com ↗Patch: source.android.com ↗

🔴Vulnerability Details

GHSA

GHSA-75rx-2w97-gf9q: An elevation of privilege vulnerability in the Android system (bluetooth)↗2022-05-13

▶

CVEList

CVE-2017-0842: An elevation of privilege vulnerability in the Android system (bluetooth)↗2017-11-16

▶

📋Vendor Advisories

Android

CVE-2017-0842: Android Security Bulletin 2017-11-01 CVE: CVE-2017-0842 Severity: HIGH Type: EoP Affected AOSP versions: 6↗2017-11-01

▶

💬Community

Bugzilla

CVE-2017-15131 xdg-user-dirs, gnome-session: Xsession creation of XDG user directories does not honor system umask policy↗2017-05-24

▶