Google Android Heif Decoder Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability in the HEIF decoder implementation in Google Android has been identified, where improper input validation can lead to a potential out-of-bounds read. This issue could result in remote information disclosure without requiring additional execution privileges. Exploitation of this vulnerability does require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized remote information disclosure.

Remediation

Users can update their devices to the May 2018 security patch level to address this vulnerability.