U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • CPE Product Version: cpe:/o:google:android:7.1.0
There are 576 matching records.
Displaying matches 341 through 360.
Vuln ID Summary CVSS Severity
CVE-2017-0729

A elevation of privilege vulnerability in the Android media framework (mediadrmserver). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37710346.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 6.8 MEDIUM
CVE-2017-0728

A denial of service vulnerability in the Android media framework (hevc decoder). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37469795.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 4.3 MEDIUM
CVE-2017-0727

A elevation of privilege vulnerability in the Android media framework (libgui). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 6.8 MEDIUM
CVE-2017-0726

A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36389123.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 5.5 MEDIUM
 V2.0: 4.3 MEDIUM
CVE-2017-0725

A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-37627194.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 5.5 MEDIUM
 V2.0: 4.3 MEDIUM
CVE-2017-0724

A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36819262.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 5.5 MEDIUM
 V2.0: 4.3 MEDIUM
CVE-2017-0723

A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37968755.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2017-0722

A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2017-0721

A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37561455.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2017-0720

A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37430213.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2017-0719

A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2017-0718

A remote code execution vulnerability in the Android media framework (mpeg2 decoder). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273547.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2017-0716

A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37203196.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2017-0715

A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36998372.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2017-0714

A remote code execution vulnerability in the Android media framework (h263 decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492637.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 9.3 HIGH
CVE-2017-0713

A remote code execution vulnerability in the Android libraries (sfntly). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-32096780.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 6.8 MEDIUM
CVE-2017-0712

A elevation of privilege vulnerability in the Android framework (wi-fi service). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37207928.

Published: August 09, 2017; 5:29:00 PM -0400 		V3.0: 7.8 HIGH
 V2.0: 6.8 MEDIUM
CVE-2017-6249

An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34373711. References: N-CVE-2017-6249.

Published: July 13, 2017; 12:29:00 PM -0400 		V3.0: 7.0 HIGH
 V2.0: 7.6 HIGH
CVE-2017-0635

A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35467107.

Published: May 12, 2017; 11:29:02 AM -0400 		V3.0: 5.5 MEDIUM
 V2.0: 7.1 HIGH
CVE-2017-0625

An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-35142799. References: M-ALPS03161531.

Published: May 12, 2017; 11:29:02 AM -0400 		V3.0: 5.5 MEDIUM
 V2.0: 4.3 MEDIUM