Android Security Bulletin—July 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of July 05, 2017 or later address all of these issues. Refer to the Pixel and Nexus update schedule to learn how to check a device's security patch level. Partners were...

PT-2017-3575

Name of the Vulnerable Software and Affected Versions: Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to insufficient state checking in the libavc component of the Android Media Framework. This can be exploited by a remote attacker to disclose protected information...

CVE-2017-0676

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34896431...

CVE-2017-0675

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34779227...

CVE-2017-0673

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-33974623...

CVE-2017-0680

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37008096...

CVE-2017-0681

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37208566...

CVE-2017-0678

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36576151...

PT-2017-10601 · Google +2 · Android +2

Name of the Vulnerable Software and Affected Versions: Android versions 7.0, 7.1.1, 7.1.2 Description: A denial of service issue exists in the Android media framework. Recommendations: For versions 7.0, 7.1.1, and 7.1.2, update to a version that contains a fix for this issue. At the moment, there...

CVE-2017-0674

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231163...

CVE-2017-0677

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36035074...

CVE-2017-0679

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36996978...

PT-2017-3395

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to errors in resource management within the Media Framework component of the Android operating system, specifically in the decoder/impeg2d dec hdr.c. This could allow a...

PT-2017-3014

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to errors in resource management within the Android media framework. It may allow a remote attacker to cause a denial of service. Recommendations For Android versions 7.0...

PT-2017-2854

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libhevc library, due to inadequate access control...

PT-2017-3020

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4 through 8.0 Description The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with inadequate access...

PT-2017-2856

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description A remote code execution issue in the Android media framework's libavc library is related to inadequate access control. This allows a remote attacker to execute arbitrary code. Recommendations For...

PT-2017-2849

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to insufficient access control in the libeffects library of the Android Media Framework, which can be exploited by a remote attacker to...

PT-2017-2880

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2 Description A information disclosure vulnerability in the Android media framework may allow a remote attacker to access protected data or execute arbitrary code in the context of a privileged process...

PT-2017-3019

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description A remote code execution issue in the Android media framework's libmpeg2 component is related to inadequate access control. This allows a remote attacker to execute arbitrary code. Recommendations Fo...