Skip to content
8.4 High

CVE-2017-13316 In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission check

Description

In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products and versions

Product Affected versions Fixed in
Android 8.1 No fix stated
Android 8 No fix stated
Android 7.1 7.1.1 → 7.1.2 No fix stated
Android 7 No fix stated
Android 6.0.1 No fix stated
Android 6 No fix stated
pixel 2018 earliest → < 2018-05-05 2018-05-05
The 1729 CVEs of Android →
Track this CVE