CVE-2017-13206

CVE-2017-13206 is an information-disclosure vulnerability in Android’s media framework (aacdec) affecting Android 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The issue is documented in multiple sources (NVD entry; Pixel/Nexus security bulletin). The Pixel bulletin lists this CVE under the...