In ResStringPool::setTo of ResourceTypes.cpp, it's possible for an attacker to control the value of mStringPoolSize to be out of bounds, causing information disclosure.
| Software | From | Fixed in |
|---|---|---|
| google / android | 7.1.2 | 7.1.2.x |
| google / android | 6.0.1 | 6.0.1.x |
| google / android | 6.0 | 6.0.x |
| google / android | 7.0 | 7.0.x |
| google / android | 8.0 | 8.0.x |
| google / android | 7.1.1 | 7.1.1.x |
| google / android | 8.1 | 8.1.x |