CVE-2017-13227
Last modified
CVE-2017-13227 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no additional execution privileges needed. EPSS estimates a 0.08% chance of exploitation in the next 30 days.
Description
In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 8.0 | |
| Android | 8.1 |
References
- https://source.android.com/security/bulletin/2018-06-01Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-13227?
How severe is CVE-2017-13227?
How do I fix CVE-2017-13227?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-1322IBM API Connect 5.0.6.0 is vulnerable to an XML External Ent…
- CVE-2017-13220An elevation of privilege vulnerability in the Upstream kern…
- CVE-2017-13221An elevation of privilege vulnerability in the Upstream kern…
- CVE-2017-13222An information disclosure vulnerability in the Upstream kern…
- CVE-2017-13225In libMtkOmxVdec.so there is a possible heap buffer overflow…
- CVE-2017-13226An elevation of privilege vulnerability in the MediaTek mtk.…
- CVE-2017-13228In function ih264d_ref_idx_reordering of libavc, there is an…
- CVE-2017-13229A remote code execution vulnerability in the Android media f…
- CVE-2017-13230In hevc codec, there is an out-of-bounds write due to an inc…
- CVE-2017-13231In libmediadrm, there is an out-of-bounds write due to impro…
- CVE-2017-13232In audioserver, there is an out-of-bounds write due to a log…
- CVE-2017-13233In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is…
Are you affected by CVE-2017-13227?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST