CVE-2017-13315

Summary

CVE-2017-13315 is a vulnerability affecting the DcParamObject.java class in certain applications. The issue lies in the writeToParcel and createFromParcel methods, where a write size mismatch creates an opportunity for a permission bypass. This flaw allows an attacker to initiate an activity with system privileges, bypassing the need for additional execution privileges. Notably, user interaction is not required for successful exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.