Google Android Media Framework information leakage Vulnerability (CVE-2017-13187)

Google Android Media Framework information leakage Vulnerability (CVE-2017-13187)
Google Android Media Framework information leakage Vulnerability (CVE-2017-13187)

Release date:
Updated on:

Affected Systems:

For Google Android 8.1
For Google Android 8.0
Google Android 7.1.2
Google Android 7.1.1
For Google Android 7.0

Description:

CVE (CAN) ID: CVE-2017-13187

Android is a mobile phone operating system based on the Linux open kernel.

The Android media framework (libhevc) has an information leakage vulnerability. Attackers can exploit this vulnerability to obtain sensitive information.

<* Source: vendor
*>

Suggestion:

Vendor patch:

Google
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://code.google.com/android/
Https://source.android.com/security/bulletin/pixel/2018-01-01