Google Android msm_ispif_config_stereo params->entries[i]vfe_intf out-of-bounds write

Summaryinfo

A vulnerability described as critical has been identified in Google Android. The impacted element is the function msm_ispif_config_stereo. Such manipulation of the argument params->entries[i]vfe_intf as part of Parameter leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2017-14876. The attack can be launched remotely. No exploit exists. Applying a patch is advised to resolve this issue.

Detailsinfo

A vulnerability was found in Google Android (Smartphone Operating System) (unknown version) and classified as critical. Affected by this issue is the function msm_ispif_config_stereo. The manipulation of the argument params->entries[i]vfe_intf as part of a Parameter leads to a out-of-bounds write vulnerability. Using CWE to declare the problem leads to CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf comes from userspace without any bounds check which could potentially result in a kernel out-of-bounds write.

The bug was discovered 02/05/2018. The weakness was disclosed 03/30/2018 (Website). The advisory is shared for download at source.android.com. This vulnerability is handled as CVE-2017-14876 since 09/28/2017. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $5k-$25k (estimation calculated on 02/24/2023). It is expected to see the exploit prices for this product increasing in the near future.

The vulnerability was handled as a non-public zero-day exploit for at least 53 days. During that time the estimated underground price was around $25k-$100k.

Applying a patch is able to eliminate this problem.

The entries VDB-110104, VDB-113150, VDB-113156 and VDB-113159 are pretty similar. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion