high7.8Public exploit code
CVE-2017-13236
In the KeyStore service, there is a permissions bypass that allows access to protected resources.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Android - 'getpidcon' Permission Bypass in KeyStore Service2018-02-07 · dos · android · Verified
Impact
In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-68217699.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 8.0, 8.1 |