PT-2017-12939 · Google · Android

Published 2017-12-06 · Updated 2019-10-03 · CVE-2017-13153

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android version 8.0

Description An elevation of privilege issue exists in the Android media framework, specifically in libaudioservice.

Recommendations For Android version 8.0, update to a version that includes the fix for the issue, as referenced by Android ID A-65280854.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2017-13153

Affected Products

Android

References · 4

• https://osv.dev/vulnerability/CVE-2017-13153 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13153 · Security Note
• https://source.android.com/security/bulletin/2017-12-01 · Vendor Advisory
• http://securityfocus.com/bid/102126 · Note