CVE-2017-0381

Published: Jan 12, 2017Modified: May 6, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31607432.

Affected (10)

Products: Google: Android

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Google Android	Version 5.0.1
Google Android	Version 5.0.2
Google Android	Version 5.0
Google Android	Version 5.1.0
Google Android	Version 5.1.1
Google Android	Version 5.1
Google Android	Version 6.0.1
Google Android	Version 6.0
Google Android	Version 7.0
Google Android	Version 7.1.0

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (18)

http://www.securityfocus.com/bid/95248

Source: security@android.com

http://www.securitytracker.com/id/1039427

Source: security@android.com

https://android.googlesource.com/platform/external/libopus/+/0d052d64480a30e83fcdda80f4774624e044beb7

Source: security@android.com

Issue TrackingPatch

https://security.gentoo.org/glsa/201702-21

Source: security@android.com

https://source.android.com/security/bulletin/2017-01-01.html

Source: security@android.com

Vendor Advisory

https://support.apple.com/HT208112

Source: security@android.com

https://support.apple.com/HT208113

Source: security@android.com

https://support.apple.com/HT208115

Source: security@android.com

https://support.apple.com/HT208144

Source: security@android.com

http://www.securityfocus.com/bid/95248

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1039427

Source: af854a3a-2127-422b-91ae-364da2661108

https://android.googlesource.com/platform/external/libopus/+/0d052d64480a30e83fcdda80f4774624e044beb7

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

https://security.gentoo.org/glsa/201702-21

Source: af854a3a-2127-422b-91ae-364da2661108

https://source.android.com/security/bulletin/2017-01-01.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT208112

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT208113

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT208115

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT208144

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.