(Pwn2Own) Google Android UserCallActivity Null Pointer Dereference Denial of Service Vulnerability

August 2nd, 2018
ZDI-18-880 ZDI-CAN-5360

CVE ID

CVSS Score

4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C

Affected Vendors

Google

Affected Products

Android

Vulnerability Details


This vulnerability allows local attackers to force a reboot on vulnerable installations of Google Android. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the handling of UserCallActivity. The issue lies in the failure to properly handle a NULL pointer dereference. An attacker can leverage this vulnerability to force the device to reboot.

Additional Details


Patched with 2018 JAN SMR


Disclosure Timeline

  • 2017-11-01 - Vulnerability reported to vendor
  • 2018-08-02 - Coordinated public release of advisory
  • 2018-08-02 - Advisory Updated

Credit

MWR Labs - Alex Plaskett
James Loureiro
Robert Miller and Georgi Geshev

Back to Advisories