# Google Inc. Android.

Every CVE that names Google Inc. Android among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [A information disclosure vulnerability in the Broadcom bcmdhd driver.](https://agentprime.io/advisories/CVE-2017-13303.md)
  `CVE-2017-13303` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [A denial of service vulnerability in the Android system (system ui).](https://agentprime.io/advisories/CVE-2017-13302.md)
  `CVE-2017-13302` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [A denial of service vulnerability in the Android system (system ui).](https://agentprime.io/advisories/CVE-2017-13301.md)
  `CVE-2017-13301` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [A denial of service vulnerability in the Android media framework (libhevc).](https://agentprime.io/advisories/CVE-2017-13300.md)
  `CVE-2017-13300` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [A other vulnerability in the Android media framework (libavc).](https://agentprime.io/advisories/CVE-2017-13299.md)
  `CVE-2017-13299` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [A information disclosure vulnerability in the Android media framework (libhavc).](https://agentprime.io/advisories/CVE-2017-13298.md)
  `CVE-2017-13298` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [A information disclosure vulnerability in the Android media framework (libhevc).](https://agentprime.io/advisories/CVE-2017-13297.md)
  `CVE-2017-13297` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [A information disclosure vulnerability in the Android media framework (libavc).](https://agentprime.io/advisories/CVE-2017-13296.md)
  `CVE-2017-13296` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [A denial of service vulnerability in the Android framework (package installer).](https://agentprime.io/advisories/CVE-2017-13295.md)
  `CVE-2017-13295` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [A information disclosure vulnerability in the Android framework (aosp email application).](https://agentprime.io/advisories/CVE-2017-13294.md)
  `CVE-2017-13294` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In the nfc_hci_cmd_received() function of core.c…](https://agentprime.io/advisories/CVE-2017-13293.md)
  `CVE-2017-13293` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In wl_get_assoc_ies of wl_cfg80211.c…](https://agentprime.io/advisories/CVE-2017-13292.md)
  `CVE-2017-13292` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc…](https://agentprime.io/advisories/CVE-2017-13291.md)
  `CVE-2017-13291` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In sdp_server_handle_client_req of sdp_server.cc…](https://agentprime.io/advisories/CVE-2017-13290.md)
  `CVE-2017-13290` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In writeToParcel and createFromParcel of RttManager.java…](https://agentprime.io/advisories/CVE-2017-13289.md)
  `CVE-2017-13289` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java…](https://agentprime.io/advisories/CVE-2017-13288.md)
  `CVE-2017-13288` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In createFromParcel of VerifyCredentialResponse.java…](https://agentprime.io/advisories/CVE-2017-13287.md)
  `CVE-2017-13287` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In writeToParcel and readFromParcel of OutputConfiguration.java…](https://agentprime.io/advisories/CVE-2017-13286.md)
  `CVE-2017-13286` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In SvoxSsmlParser and startElement of svox_ssml_parser.cpp…](https://agentprime.io/advisories/CVE-2017-13285.md)
  `CVE-2017-13285` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In config_set_string of config.cc, it is possible to pair a second BT keyboard without…](https://agentprime.io/advisories/CVE-2017-13284.md)
  `CVE-2017-13284` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl…](https://agentprime.io/advisories/CVE-2017-13283.md)
  `CVE-2017-13283` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc…](https://agentprime.io/advisories/CVE-2017-13282.md)
  `CVE-2017-13282` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In avrc_pars_browsing_cmd of avrc_pars_tg.cc…](https://agentprime.io/advisories/CVE-2017-13281.md)
  `CVE-2017-13281` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In the FrameSequence_gif::FrameSequence_gif function of libframesequence…](https://agentprime.io/advisories/CVE-2017-13280.md)
  `CVE-2017-13280` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In M3UParser::parse of M3UParser.cpp…](https://agentprime.io/advisories/CVE-2017-13279.md)
  `CVE-2017-13279` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free.](https://agentprime.io/advisories/CVE-2017-13278.md)
  `CVE-2017-13278` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In ihevcd_fmt_conv of ihevcd_fmt_conv.c…](https://agentprime.io/advisories/CVE-2017-13277.md)
  `CVE-2017-13277` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In CProgramConfig_ReadHeightExt of tpdec_asc.cpp…](https://agentprime.io/advisories/CVE-2017-13276.md)
  `CVE-2017-13276` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In getVSCoverage of CmapCoverage.cpp…](https://agentprime.io/advisories/CVE-2017-13275.md)
  `CVE-2017-13275` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In the getHost() function of UriTest.java…](https://agentprime.io/advisories/CVE-2017-13274.md)
  `CVE-2017-13274` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [Google Inc. Android: In avrc_pars_vendor_cmd of avrc_pars_tg.cc…](https://agentprime.io/advisories/CVE-2017-13267.md)
  `CVE-2017-13267` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 4 Apr 2018
- [In xt_qtaguid.c, there is a race condition due to insufficient locking.](https://agentprime.io/advisories/CVE-2017-13273.md)
  `CVE-2017-13273` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 15 Feb 2018
- [Google Inc. Android: In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier…](https://agentprime.io/advisories/CVE-2017-13247.md)
  `CVE-2017-13247` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A information disclosure vulnerability in the Upstream kernel network driver.](https://agentprime.io/advisories/CVE-2017-13246.md)
  `CVE-2017-13246` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A elevation of privilege vulnerability in the Upstream kernel audio driver.](https://agentprime.io/advisories/CVE-2017-13245.md)
  `CVE-2017-13245` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A elevation of privilege vulnerability in the Upstream kernel easel.](https://agentprime.io/advisories/CVE-2017-13244.md)
  `CVE-2017-13244` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A information disclosure vulnerability in the Android system (ui).](https://agentprime.io/advisories/CVE-2017-13243.md)
  `CVE-2017-13243` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A information disclosure vulnerability in the Android system (bluetooth).](https://agentprime.io/advisories/CVE-2017-13242.md)
  `CVE-2017-13242` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc).](https://agentprime.io/advisories/CVE-2017-13241.md)
  `CVE-2017-13241` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A information disclosure vulnerability in the Android framework (crypto framework).](https://agentprime.io/advisories/CVE-2017-13240.md)
  `CVE-2017-13240` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A information disclosure vulnerability in the Android framework (ui framework).](https://agentprime.io/advisories/CVE-2017-13239.md)
  `CVE-2017-13239` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [Google Inc. Android: In XBLRamDump mode, there is a debug feature that can be used to dump memory contents…](https://agentprime.io/advisories/CVE-2017-13238.md)
  `CVE-2017-13238` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [In the KeyStore service, there is a permissions bypass that allows access to protected resources.](https://agentprime.io/advisories/CVE-2017-13236.md)
  `CVE-2017-13236` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A other vulnerability in the Android media framework (n/a).](https://agentprime.io/advisories/CVE-2017-13235.md)
  `CVE-2017-13235` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak.](https://agentprime.io/advisories/CVE-2017-13234.md)
  `CVE-2017-13234` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion.](https://agentprime.io/advisories/CVE-2017-13233.md)
  `CVE-2017-13233` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [Google Inc. Android: In audioserver, there is an out-of-bounds write due to a log statement using %s with an…](https://agentprime.io/advisories/CVE-2017-13232.md)
  `CVE-2017-13232` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [In libmediadrm, there is an out-of-bounds write due to improper input validation.](https://agentprime.io/advisories/CVE-2017-13231.md)
  `CVE-2017-13231` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [Google Inc. Android: In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the…](https://agentprime.io/advisories/CVE-2017-13230.md)
  `CVE-2017-13230` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [A remote code execution vulnerability in the Android media framework (n/a).](https://agentprime.io/advisories/CVE-2017-13229.md)
  `CVE-2017-13229` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [Google Inc. Android: In function ih264d_ref_idx_reordering of libavc…](https://agentprime.io/advisories/CVE-2017-13228.md)
  `CVE-2017-13228` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Feb 2018
- [An elevation of privilege vulnerability in the MediaTek mtk.](https://agentprime.io/advisories/CVE-2017-13226.md)
  `CVE-2017-13226` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Jan 2018
- [In libMtkOmxVdec.so there is a possible heap buffer overflow.](https://agentprime.io/advisories/CVE-2017-13225.md)
  `CVE-2017-13225` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Jan 2018
- [An information disclosure vulnerability in the Upstream kernel kernel.](https://agentprime.io/advisories/CVE-2017-13222.md)
  `CVE-2017-13222` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Jan 2018
- [An elevation of privilege vulnerability in the Upstream kernel wifi driver.](https://agentprime.io/advisories/CVE-2017-13221.md)
  `CVE-2017-13221` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Jan 2018
- [An elevation of privilege vulnerability in the Upstream kernel bluez.](https://agentprime.io/advisories/CVE-2017-13220.md)
  `CVE-2017-13220` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Jan 2018
- [A denial of service vulnerability in the Upstream kernel synaptics touchscreen controller.](https://agentprime.io/advisories/CVE-2017-13219.md)
  `CVE-2017-13219` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Jan 2018
- [Google Inc. Android: In DisplayFtmItem in the bootloader, there is an out-of-bounds write due to reading a…](https://agentprime.io/advisories/CVE-2017-13217.md)
  `CVE-2017-13217` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Jan 2018
- [Google Inc. Android: In ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking…](https://agentprime.io/advisories/CVE-2017-13216.md)
  `CVE-2017-13216` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Jan 2018
- [A elevation of privilege vulnerability in the Upstream kernel skcipher.](https://agentprime.io/advisories/CVE-2017-13215.md)
  `CVE-2017-13215` · CVE record: Google Inc. Android · No CVSS score · Not analysed yet · Published 12 Jan 2018

Newest: <https://agentprime.io/advisories/technology/google-inc-android.md>
Older: <https://agentprime.io/advisories/technology/google-inc-android.md?cursor=WyIyMDE4LTAxLTEyVDIzOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNy0xMzIxNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-inc-android&cursor=WyIyMDE4LTA0LTA0VDE2OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNy0xMzMwNCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-inc-android/?cursor=WyIyMDE4LTA0LTA0VDE2OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNy0xMzMwNCJd>. Everything for agents: <https://agentprime.io/llms.txt>.