CVE-2017-13247

In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with user execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-71486645.

• CWE-862

• http://www.securityfocus.com/bid/103027Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory
• http://www.securityfocus.com/bid/103027Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2018-02-01Vendor Advisory

Published

Feb 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13241A information disclosure vulnerability in the Android media …
• CVE-2017-13242A information disclosure vulnerability in the Android system…
• CVE-2017-13243A information disclosure vulnerability in the Android system…
• CVE-2017-13244A elevation of privilege vulnerability in the Upstream kerne…
• CVE-2017-13245A elevation of privilege vulnerability in the Upstream kerne…
• CVE-2017-13246A information disclosure vulnerability in the Upstream kerne…
• CVE-2017-13248In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr…
• CVE-2017-13249In impeg2d_api_set_display_frame of impeg2d_api_main.c, ther…
• CVE-2017-1325IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting…
• CVE-2017-13250In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is…
• CVE-2017-13251In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there i…
• CVE-2017-13252In CryptoHal::decrypt of CryptoHal.cpp, there is an out of b…