2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13317 | MEDIUM | 5.7 | 0.1% | Jan 28, 2025 | In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input val... |
| CVE-2017-20196 | MEDIUM | 6.3 | 0.4% | Jan 26, 2025 | A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affe... |
| CVE-2017-13322 | MEDIUM | 5.5 | 0.2% | Jan 17, 2025 | In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services d... |
| CVE-2017-13308 | MEDIUM | 6.7 | 0.1% | Dec 5, 2024 | In tscpu_write_GPIO_out and mtkts_Abts_write of mtk_ts_Abts.c, there is a possible buffer overflow in an sscanf due to i... |
| CVE-2017-13323 | HIGH | 7.8 | 0.1% | Nov 27, 2024 | In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to loca... |
| CVE-2017-13321 | MEDIUM | 5.5 | 0.1% | Nov 27, 2024 | In SensorService::isDataInjectionEnabled of frameworks/native/services/sensorservice/SensorService.cpp, there is a possi... |
| CVE-2017-13320 | MEDIUM | 6.5 | 0.2% | Nov 27, 2024 | In impeg2d_bit_stream_flush() of libmpeg2dec there is a possible OOB read due to a missing bounds check. This could lead... |
| CVE-2017-13319 | HIGH | 7.5 | 0.3% | Nov 27, 2024 | In pvmp3_get_main_data_size of pvmp3_get_main_data_size.cpp, there is a possible buffer overread due to a missing bounds... |
| CVE-2017-13316 | HIGH | 7.8 | 0.1% | Nov 27, 2024 | In checkPermissions of RecognitionService.java, there is a possible permissions bypass due to a missing permission check... |
| CVE-2017-18307 | MEDIUM | 5.5 | 0.1% | Nov 26, 2024 | Information disclosure possible while audio playback. |
| CVE-2017-18306 | MEDIUM | 5.5 | 0.1% | Nov 26, 2024 | Information disclosure due to uninitialized variable. |
| CVE-2017-18153 | HIGH | 7 | 0.1% | Nov 26, 2024 | A race condition exists in a driver potentially leading to a use-after-free condition. |
| CVE-2017-17772 | CRITICAL | 9.8 | 0.3% | Nov 26, 2024 | In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation. |
| CVE-2017-15832 | HIGH | 7.8 | 0.1% | Nov 26, 2024 | Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW |
| CVE-2017-11076 | CRITICAL | 9.8 | 0.3% | Nov 26, 2024 | On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into t... |
| CVE-2017-9711 | HIGH | 7.8 | 0.1% | Nov 22, 2024 | Certain unprivileged processes are able to perform IOCTL calls. |
| CVE-2017-13315 | HIGH | 7.8 | 0.1% | Nov 19, 2024 | In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. ... |
| CVE-2017-13314 | HIGH | 7.8 | 0.1% | Nov 15, 2024 | In setAllowOnlyVpnForUids of NetworkManagementService.java, there is a possible security settings bypass due to a missin... |
| CVE-2017-13313 | MEDIUM | 6.5 | 0.2% | Nov 15, 2024 | In ElementaryStreamQueue::dequeueAccessUnitMPEG4Video of ESQueue.cpp, there is a possible infinite loop leading to resou... |
| CVE-2017-13312 | HIGH | 7.8 | 0.1% | Nov 15, 2024 | In createFromParcel of MediaCas.java, there is a possible parcel read/write mismatch due to improper input validation. T... |
| CVE-2017-13311 | MEDIUM | 6.7 | 0.1% | Nov 15, 2024 | In the read() function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions... |
| CVE-2017-13310 | HIGH | 7.8 | 0.1% | Nov 15, 2024 | In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypas... |
| CVE-2017-13309 | MEDIUM | 5.5 | 0.1% | Nov 15, 2024 | In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This cou... |
| CVE-2017-13227 | MEDIUM | 5.5 | 0.1% | Nov 14, 2024 | In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could le... |
| CVE-2017-20195 | MEDIUM | 5.5 | 0.3% | Oct 29, 2024 | A vulnerability was found in LUNAD3v AreaLoad up to 1a1103182ed63a06dde63d1712f3262eda19c3ec. It has been rated as criti... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now