CVE-2017-13186

CVE-2017-13186 affects the Android media framework (libavc) due to incorrect use of the mmco parameter. Affected products include Android devices with versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The vulnerability is described with a CVSSv3 base score of 7.5 (HIGH), with network attack vector, no us...

CVE-2017-13187

An information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65034175...

CVE-2017-13188

CVE-2017-13188 is an information disclosure vulnerability in the Android media framework (aac). The connected Pixel/Nexus bulletin attributes this CVE to the Media framework component and lists affected Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1, with Android bug ID A-65280786. The bulletin...

CVE-2017-13189

CVE-2017-13189 concerns Android's media framework (libavc) and a memory-allocation failure in dec_hdl handling. Affected Android versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. The CVSS indicates HIGH severity with network access and no user interaction. The description notes a DoS impact; no details on s...

CVE-2017-13188

An information disclosure vulnerability in the Android media framework aac. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65280786...

CVE-2017-13190

A vulnerability in the Android media framework libhevc related to handling pscodecobj memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68299873...

CVE-2017-13207

CVE-2017-13207 is an information-disclosure vulnerability in Android’s Media Framework (stagefright mpeg4writer) affecting Android 7.0, 7.1.1, 7.1.2 and 8.0. The issue is documented by NVD and reflected in the Pixel/Nexus bulletin under the Media framework. Affected component: stagefright mpeg4wr...

CVE-2017-13194

A vulnerability in the Android media framework libvpx related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201...

CVE-2017-13198

A vulnerability in the Android media framework ex related to composition of frames lacking a color map. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68399117...

CVE-2017-13185

An information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471...

CVE-2017-13189

A vulnerability in the Android media framework libavc related to handling dechdl memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68300072...

CVE-2017-13186

A vulnerability in the Android media framework libavc related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65735716...

CVE-2017-13200

An information disclosure vulnerability in the Android media framework av related to id3 unsynchronization. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63100526...

CVE-2017-13204

CVE-2017-13204 is an information-disclosure vulnerability in Android's media framework (libavc) affecting Android 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The flaw is tied to the libavc component within the Media framework, with Android IDs A-64380237. Public sources classify the related issue in the Pix...

CVE-2017-13203

An information disclosure vulnerability in the Android media framework libavc. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-63122634...

CVE-2017-13206

An information disclosure vulnerability in the Android media framework aacdec. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65025048...

CVE-2017-13194

A vulnerability in the Android media framework libvpx related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201...

CVE-2017-13185

CVE-2017-13185 is an information-disclosure vulnerability in Android’s media framework libhevc. Affected products/versions per sources: Android 7.0, 7.1.1, 7.1.2, and 8.0. The root cause is information exposure via the libhevc decoder in the Media framework (details are consistent across NVD/CNVD...

CVE-2017-13206

CVE-2017-13206 is an information-disclosure vulnerability in Android’s media framework (aacdec) affecting Android 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The issue is documented in multiple sources (NVD entry; Pixel/Nexus security bulletin). The Pixel bulletin lists this CVE under the...

Google Android Media Framework Denial of Service Vulnerability (CNVD-2018-00629)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media Framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media Framework in Android. A remote attacker could exploit th...