CVE-2017-13236

In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-68217699.

• CWE-732

• http://www.securityfocus.com/bid/102979Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory
• https://www.exploit-db.com/exploits/43996/Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/102979Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory
• https://www.exploit-db.com/exploits/43996/Exploit, Third Party Advisory, VDB Entry

Published

Feb 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13230In hevc codec, there is an out-of-bounds write due to an inc…
• CVE-2017-13231In libmediadrm, there is an out-of-bounds write due to impro…
• CVE-2017-13232In audioserver, there is an out-of-bounds write due to a log…
• CVE-2017-13233In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is…
• CVE-2017-13234In DLSParser of the sonivox library, there is possible resou…
• CVE-2017-13235A other vulnerability in the Android media framework (n/a). …
• CVE-2017-13238In XBLRamDump mode, there is a debug feature that can be use…
• CVE-2017-13239A information disclosure vulnerability in the Android framew…
• CVE-2017-1324IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scrip…
• CVE-2017-13240A information disclosure vulnerability in the Android framew…
• CVE-2017-13241A information disclosure vulnerability in the Android media …
• CVE-2017-13242A information disclosure vulnerability in the Android system…