CVE-2017-0412

EIP tracks 1 public exploit for CVE-2017-0412. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit leverages a race condition in Android's MemoryIntArray class to cause out-of-bounds memory access and trigger a munmap operation with a controlled size, leading to a system_server crash. The PoC demonstrates the vulnerability by manipulating ashmem descriptors during critical operations.

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33039926.