Android Pixel and Nexus Devices Out-of-Bounds Read Vulnerability in ASN.1 Decoder

A vulnerability allowing a possible out-of-bounds read has been identified in the ASN.1 decoder component of Android. This issue arises from a missing bounds check, which could lead to local information disclosure. Exploitation of this vulnerability requires System execution privileges, but does not involve user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized local information disclosure.

Remediation

Users can update their devices to the June 2018 security patch level to address this vulnerability.