CVE-2017-13317

EPSS 0.03%
Published 28.01.2025 17:15:08
Last modified 10.07.2025 20:41:48
Source security@android.com
Teams watchlist Login
Open Login

In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Google ≫ Android Version8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.03%	0.075

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.7	2.1	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://source.android.com/security/bulletin/pixel/2018-05-01

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-13317

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-13317

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-13317

EUVD