CVE-2017-13233

In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-62851602.

• CWE-400

• http://www.securityfocus.com/bid/102976Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory
• http://www.securityfocus.com/bid/102976Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory

Published

Feb 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13227In the autofill service, the package name that is provided b…5.5
• CVE-2017-13228In function ih264d_ref_idx_reordering of libavc, there is an…
• CVE-2017-13229A remote code execution vulnerability in the Android media f…
• CVE-2017-13230In hevc codec, there is an out-of-bounds write due to an inc…
• CVE-2017-13231In libmediadrm, there is an out-of-bounds write due to impro…
• CVE-2017-13232In audioserver, there is an out-of-bounds write due to a log…
• CVE-2017-13234In DLSParser of the sonivox library, there is possible resou…
• CVE-2017-13235A other vulnerability in the Android media framework (n/a). …
• CVE-2017-13236In the KeyStore service, there is a permissions bypass that …
• CVE-2017-13238In XBLRamDump mode, there is a debug feature that can be use…
• CVE-2017-13239A information disclosure vulnerability in the Android framew…
• CVE-2017-1324IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scrip…