CVE-2017-13238

In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-64610940.

• CWE-200

• http://www.securityfocus.com/bid/103024Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory
• http://www.securityfocus.com/bid/103024Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory

Published

Feb 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13231In libmediadrm, there is an out-of-bounds write due to impro…
• CVE-2017-13232In audioserver, there is an out-of-bounds write due to a log…
• CVE-2017-13233In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is…
• CVE-2017-13234In DLSParser of the sonivox library, there is possible resou…
• CVE-2017-13235A other vulnerability in the Android media framework (n/a). …
• CVE-2017-13236In the KeyStore service, there is a permissions bypass that …
• CVE-2017-13239A information disclosure vulnerability in the Android framew…
• CVE-2017-1324IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scrip…
• CVE-2017-13240A information disclosure vulnerability in the Android framew…
• CVE-2017-13241A information disclosure vulnerability in the Android media …
• CVE-2017-13242A information disclosure vulnerability in the Android system…
• CVE-2017-13243A information disclosure vulnerability in the Android system…