Vulnetix
Try Vulnetix Request Demo
CVE-2017-13217 PUBLISHED CVSS 7.800000190734863 HIGH

In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a string without verifying that it's null-terminated. This could lead to a secure boot bypass and a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-68269077.

EPSS 0.03% · 9.1th percentile

Risk Scores

CVSS v3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.03%
9.1th percentile

Affected Products

VendorProductVersions
googleandroid
Google Inc.AndroidAndroid kernel

Timeline

References

Open in Interactive Console →