13 Critical Remote Code Execution Bugs Fixed in September Android Update

Google fixed 81 vulnerabilities, including 13 critical remote code execution bugs, in the September release of its Android Security Bulletin on Tuesday. The most concerning vulnerabilities, as usual, concern Media Framework, Android’s lightweight media player. The framework includes the...

Android Security Bulletin—September 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of September 05, 2017 or later address all of these issues. Refer to the Pixel and Nexus update schedule to learn how to check a device's security patch level. Partners were...

CVE-2017-0758

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741...

PT-2017-3396

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0 Description A denial of service issue in the Android media framework, specifically in the libhevc library, is related to resource management errors. This can be exploited by a remote attacker to cause a denia...

CVE-2017-0764

A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...

PT-2017-2851

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4 through 7.1.2 Description The issue is related to insufficient access control in the libjhead library of the Android Media Framework, which can be exploited by a remote attacker to execute arbitrary code. Recommendations...

CVE-2017-0756

A remote code execution vulnerability in the Android media framework libstagefright. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073...

CVE-2017-0759

A remote code execution vulnerability in the Android media framework libstagefright. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36715268...

CVE-2017-0761

A remote code execution vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38448381...

CVE-2017-0763

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62534693...

CVE-2017-0760

A remote code execution vulnerability in the Android media framework libstagefright. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237396...

CVE-2017-0762

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62214264...

PT-2017-3401

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libhevc library. This vulnerability is associated...

Vulnerability in the media framework (libavc) of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the Android operating system’s media framework libavc is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Vulnerability in the media framework (libmpeg2) of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the Android operating system’s media framework libmpeg2 is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability in the Android operating system’s media framework (H263 decoder), allowing a perpetrator to execute arbitrary code

The vulnerability in the Android operating system’s media framework H263 decoder is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability in the media framework (libavc) of the Android operating system, allowing a hacker to trigger a service failure

The vulnerability in the Android operating system’s media framework libavc is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerability in the media framework (libhevc) of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the Android operating system’s Media Framework libhevc is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability in the media framework (libavc) of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the Android operating system’s media framework libavc is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Vulnerability in the Android operating system’s media framework (H263 decoder), allowing a perpetrator to execute arbitrary code

The vulnerability in the Android operating system’s media framework H263 decoder is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...