Google Android Media Framework Components Multiple Security Vulnerabilities

Bugtraq ID:	102126
Class:	Unknown
CVE:	CVE-2017-0872 CVE-2017-0876 CVE-2017-0877 CVE-2017-0878 CVE-2017-13151 CVE-2017-13153 CVE-2017-0837 CVE-2017-0873 CVE-2017-0874 CVE-2017-0880 CVE-2017-13148
Remote:	Yes
Local:	No
Published:	Dec 01 2017 12:00AM
Updated:	Dec 19 2017 10:01PM
Credit:	Mingjian Zhou (@Mingjian_Zhou) of C0RE Team, and Chi Zhang of C0RE Team.
Vulnerable:	Google Pixel XL 0 Google Pixel C 0 Google Pixel 0 Google Nexus 9 Google Nexus 7 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Nexus 10 Google Android 7.1.1 Google Android 6.0.1 Google Android 5.1.1 Google Android 8.0 Google Android 7.1.2 Google Android 7.0 Google Android 6.0
Not Vulnerable:

Google Android Media Framework Components Multiple Security Vulnerabilities

Google Android is prone to the following security vulnerabilities:

1. Multiple remote-code execution vulnerabilities
2. Multiple privilege-escalation vulnerabilities
3. Multiple denial-of-service vulnerabilities

An attacker can exploit these issues to gain elevated privileges or execute arbitrary code. Failed exploits may result in a denial-of-service condition.

These issues are being tracked by Android Bug IDs A-65290323, A-64964675*, A-66372937*, A-65186291, A-63874456, A-65280854, A-64340921, A-63316255, A-63315932, A-65646012, and A-65717533.

Google Android Media Framework Components Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.