Google Android Media Framework Multiple Security Vulnerabilities

Bugtraq ID:	101717
Class:	Unknown
CVE:	CVE-2017-0832 CVE-2017-0833 CVE-2017-0834 CVE-2017-0835 CVE-2017-0836 CVE-2017-0839 CVE-2017-0840
Remote:	Yes
Local:	No
Published:	Nov 06 2017 12:00AM
Updated:	Dec 19 2017 10:36PM
Credit:	Google, Chi Zhang of C0RE Team, Yongke Wang of Tencent's Xuanwu Lab, Mingjian Zhou (@Mingjian_Zhou) of C0RE Team.
Vulnerable:	Google Pixel XL 0 Google Pixel C 0 Google Pixel 0 Google Nexus Player 0 Google Nexus 9 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Android 7.1.1 Google Android 6.0.1 Google Android 5.1.1 Google Android 5.0.2 Google Android 8.0 Google Android 7.1.2 Google Android 7.0 Google Android 6.0
Not Vulnerable:

Google Android Media Framework Multiple Security Vulnerabilities

Google Android is prone to multiple security vulnerabilities.

An attacker can leverage these issues to obtain sensitive information, and execute arbitrary code with elevated privileges. Failed exploit attempts may result in a denial of service condition.

These issues are being tracked by Android Bug IDs A-62887820, A-62896384, A-63125953, A-63316832, A-64893226, A-64478003, A-62948670.

Google Android Media Framework Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Android Media Framework Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Media Framework Multiple Security Vulnerabilities

References:

• Android Homepage (Google)
  
• Android Security Bulletin�??November 2017 (Android)