CVE-2017-13181 — Double Free in INC Android

CWE-415 — Double Free4 documents4 sources

Severity

7.8HIGHNVD

EPSS

0.0%

top 91.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google INC Android Google Android

Timeline

PublishedJan 12

Latest updateMay 14

Description

In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67864232.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDgoogle/android5 versions+4

▶CVEListV5google_inc/android5 versions+4

Patches

Patch: source.android.com ↗Patch: source.android.com ↗

🔴Vulnerability Details

GHSA

GHSA-92qm-hcqp-vh5r: In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer↗2022-05-14

▶

CVEList

CVE-2017-13181: In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer↗2018-01-12

▶

📋Vendor Advisories

Android

CVE-2017-13181: Android Security Bulletin 2018-01-01 CVE: CVE-2017-13181 Severity: HIGH Type: EoP Affected AOSP versions: 7↗2018-01-01

▶