Skip to content

Known vulnerabilities in Google Inc. Android

Is your version affected?

CVE Summary Score Published
CVE-2017-13298 A information disclosure vulnerability in the Android media framework (libhavc) Not rated Apr 4, 2018
CVE-2017-13283 In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a… Not rated Apr 4, 2018
CVE-2017-13274 In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination Not rated Apr 4, 2018
CVE-2017-13290 In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check Not rated Apr 4, 2018
CVE-2017-13282 In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check Not rated Apr 4, 2018
CVE-2017-13289 In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch Not rated Apr 4, 2018
CVE-2017-13281 In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check Not rated Apr 4, 2018
CVE-2017-13288 In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit… Not rated Apr 4, 2018
CVE-2017-13280 In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing… Not rated Apr 4, 2018
CVE-2017-13279 In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into… Not rated Apr 4, 2018
CVE-2017-13278 In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free Not rated Apr 4, 2018
CVE-2017-13273 In xt_qtaguid.c, there is a race condition due to insufficient locking Not rated Feb 15, 2018
CVE-2017-13247 In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock Not rated Feb 12, 2018
CVE-2017-13236 In the KeyStore service, there is a permissions bypass that allows access to protected resources Not rated Feb 12, 2018
CVE-2017-13235 A other vulnerability in the Android media framework (n/a) Not rated Feb 12, 2018
CVE-2017-13246 A information disclosure vulnerability in the Upstream kernel network driver Not rated Feb 12, 2018
CVE-2017-13245 A elevation of privilege vulnerability in the Upstream kernel audio driver Not rated Feb 12, 2018
CVE-2017-13234 In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak Not rated Feb 12, 2018
CVE-2017-13233 In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion Not rated Feb 12, 2018
CVE-2017-13244 A elevation of privilege vulnerability in the Upstream kernel easel Not rated Feb 12, 2018
CVE-2017-13243 A information disclosure vulnerability in the Android system (ui) Not rated Feb 12, 2018
CVE-2017-13232 In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL… Not rated Feb 12, 2018
CVE-2017-13242 A information disclosure vulnerability in the Android system (bluetooth) Not rated Feb 12, 2018
CVE-2017-13231 In libmediadrm, there is an out-of-bounds write due to improper input validation Not rated Feb 12, 2018
CVE-2017-13241 A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc) Not rated Feb 12, 2018