Vulnerabilities > CVE-2017-8233 - Out-of-bounds Write vulnerability in Google Android

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
google
CWE-787
critical

Summary

In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array potentially leading to an out-of-bounds heap write.

Vulnerable Configurations

Part Description Count
OS
Google
1

Common Weakness Enumeration (CWE)