CVE-2017-13319

In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security@android.com

Published

2024-11-27

Last modified

2024-11-29

Weaknesses

CWE-120

Affected products

• Android (Google)
• Pixel (Google)

References

• https://source.android.com/docs/security/bulletin/pixel/2018-05-01