Android Security Bulletin—September 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of September 05, 2017 or later address all of these issues. Refer to the Pixel and Nexus update schedule to learn how to check a device's security patch level. Partners were...

CVE-2017-0756

A remote code execution vulnerability in the Android media framework libstagefright. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073...

CVE-2017-0761

A remote code execution vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38448381...

CVE-2017-0763

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62534693...

CVE-2017-0762

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62214264...

CVE-2017-0760

A remote code execution vulnerability in the Android media framework libstagefright. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237396...

CVE-2017-0759

A remote code execution vulnerability in the Android media framework libstagefright. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36715268...

CVE-2017-0758

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741...

CVE-2017-0764

A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...

Vulnerability in the media framework (libhevc) of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the Android operating system’s Media Framework libhevc is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability in the media framework (libmpeg2) of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the Android operating system’s media framework libmpeg2 is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability in the media framework (libavc) of the Android operating system, allowing a hacker to trigger a service failure

The vulnerability in the Android operating system’s media framework libavc is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerability in the Android operating system’s media framework (H263 decoder), allowing a perpetrator to execute arbitrary code

The vulnerability in the Android operating system’s media framework H263 decoder is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability in the media framework (libmpeg2) of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the Android operating system’s media framework libmpeg2 is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability in the Android operating system’s media framework (H263 decoder), allowing a perpetrator to execute arbitrary code

The vulnerability in the Android operating system’s media framework H263 decoder is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability in the media framework (libavc) of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the Android operating system’s media framework libavc is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Vulnerability in the media framework (libavc) of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the Android operating system’s media framework libavc is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2017-0805

A elevation of privilege vulnerability in the Android media framework libstagefright. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237701...

UBUNTU-CVE-2017-0805

A elevation of privilege vulnerability in the Android media framework libstagefright. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237701...

CVE-2017-0805

A elevation of privilege vulnerability in the Android media framework libstagefright. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237701...