CVE-2017-13315

Summary

CVE-2017-13315 is a vulnerability affecting the DcParamObject.java class in certain applications. In the writeToParcel and createFromParcel methods, there is a permission bypass issue caused by a write size mismatch. This flaw enables an attacker to start an activity with system privileges without requiring any additional execution privileges, making user interaction unnecessary for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.