VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2017-8245
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2017-8245
CVSS severity score: 4.6/10.0
Description:
In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload size that will overflow its own declared size, an out of bounds memory copy occurs.
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by kenrb@chromium.org
, May 29 2017Status: Assigned (was: Untriaged)