Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-13216. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a race condition in the Android ashmem driver (CVE-2017-13216), allowing an attacker to manipulate the size of a shared memory region during mapping operations, leading to an inter-process munmap with an attacker-controlled size. The PoC triggers this condition in the system_server process, potentially causing a crash or further exploitation.
Description
In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-66954097.
Exploits (1)
This exploit demonstrates a race condition in the Android ashmem driver (CVE-2017-13216), allowing an attacker to manipulate the size of a shared memory region during mapping operations, leading to an inter-process munmap with an attacker-controlled size. The PoC triggers this condition in the system_server process, potentially causing a crash or further exploitation.
References (4)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H