PT-2018-1891 · Google+2 · Libvpx+3

Published 2018-01-12 · Updated 2024-06-15 · CVE-2017-13194

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 8.1

Description A vulnerability in the Android media framework (libvpx) is related to incorrect frame width handling. This issue may allow a remote attacker to cause a denial of service and potentially execute arbitrary code.

Recommendations For Android versions 7.0 through 8.1, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2018-01495

CVE-2017-13194

DLA-1290-1

DSA-4132-1

MGASA-2018-0112

OPENSUSE-SU-2024:11010-1

SUSE-SU-2018:0181-1

SUSE-SU-2018_0181-1

USN-4199-1

USN-4199-2

Affected Products

Android

Suse

Ubuntu

Libvpx

References · 39

• https://ubuntu.com/security/CVE-2019-9232 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4199-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-13194 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/K7IIUY6YMQMZRGUJWQTDO45UHYP4222K · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0181-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-13194 · Vendor Advisory
• https://usn.ubuntu.com/4199-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13194 · Security Note
• https://source.android.com/security/bulletin/pixel/2018-01-01 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4199-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4199-2 · Vendor Advisory
• https://android.googlesource.com/platform/external/libvpx/+/55cd1dd7c8d0a3de907d22e0f12718733f4e41d9 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-13194 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0112.html · Security Note
• https://ubuntu.com/security/CVE-2019-9371 · Vendor Advisory