NetSight
medium5.5

CVE-2017-13322

In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code.

Impact

In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0

Weakness classification

References