CVE Vulnerabilities

CVE-2017-13235

NULL Pointer Dereference

Published: Feb 12, 2018 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID: A-68342866.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

NameVendorStart VersionEnd Version
AndroidGoogle5.1.1 (including)5.1.1 (including)
AndroidGoogle6.0 (including)6.0 (including)
AndroidGoogle6.0.1 (including)6.0.1 (including)
AndroidGoogle7.0 (including)7.0 (including)
AndroidGoogle7.1.1 (including)7.1.1 (including)
AndroidGoogle7.1.2 (including)7.1.2 (including)
AndroidGoogle8.0 (including)8.0 (including)
AndroidGoogle8.1 (including)8.1 (including)

Potential Mitigations

References