CVE-2017-13228

In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-69478425.

• CWE-787

• http://www.securityfocus.com/bid/102976Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory
• http://www.securityfocus.com/bid/102976Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory

Published

Feb 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13220An elevation of privilege vulnerability in the Upstream kern…
• CVE-2017-13221An elevation of privilege vulnerability in the Upstream kern…
• CVE-2017-13222An information disclosure vulnerability in the Upstream kern…
• CVE-2017-13225In libMtkOmxVdec.so there is a possible heap buffer overflow…
• CVE-2017-13226An elevation of privilege vulnerability in the MediaTek mtk.…
• CVE-2017-13227In the autofill service, the package name that is provided b…5.5
• CVE-2017-13229A remote code execution vulnerability in the Android media f…
• CVE-2017-13230In hevc codec, there is an out-of-bounds write due to an inc…
• CVE-2017-13231In libmediadrm, there is an out-of-bounds write due to impro…
• CVE-2017-13232In audioserver, there is an out-of-bounds write due to a log…
• CVE-2017-13233In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is…
• CVE-2017-13234In DLSParser of the sonivox library, there is possible resou…