high8.8
CVE-2017-13176
In the parseURL function of URLStreamHandler, there is improper input validation of the host field.
Impact
In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that could enable bypassing user interaction requirements with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68341964.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 |