nanopathi/external_libavc_AOSP10_r33

CVE-2017-0858 (High) detected in libavcandroid-10.0.0_r47

mend-bolt-for-github opened this issue · 0 comments

mend-bolt-for-github commented

CVE-2017-0858 - High Severity Vulnerability

Vulnerable Library - libavcandroid-10.0.0_r47

Library home page: https://android.googlesource.com/platform/external/libavc

Found in HEAD commit: 37f50850b5d7f0ced9d617b75f5a146bf6bb5c67

Found in base branch: master

Vulnerable Source Files (1)

/decoder/ih264d_parse_pslice.c

Vulnerability Details

Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894.

Publish Date: 2017-11-16

URL: CVE-2017-0858

CVSS 3 Score Details (7.5)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Network
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: None
    • Scope: Unchanged
  • Impact Metrics:
    • Confidentiality Impact: None
    • Integrity Impact: None
    • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://source.android.com/security/bulletin/pixel/2017-11-01

Release Date: 2017-11-16

Fix Resolution: android-8.0.0_r25

Step up your Open Source Security Game with WhiteSource here