CVE-2017-13227: Medium severity Google Android vulnerability
Published Jun 4, 2018
·Updated
In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
3 affected components
Google Android
Google Android=8.0
Google Android=8.1
Remediation
Patch Available
Event History
Jun 4, 2018
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Nov 14, 2024
CVE Published
via MITRE·10:10 PM
Data Sourced
via MITRE·10:10 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-13227?
CVE-2017-13227 is classified as a high severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2017-13227?
To mitigate CVE-2017-13227, it is recommended to update your Android device to the latest version that addresses this vulnerability.
3
Which versions of Android are affected by CVE-2017-13227?
CVE-2017-13227 affects Android versions 8.0 and 8.1.
4
What type of attack does CVE-2017-13227 enable?
CVE-2017-13227 may enable an attacker to gain unauthorized access to sensitive information without requiring user interaction.
5
Is user interaction required for exploiting CVE-2017-13227?
No, user interaction is not needed for the exploitation of CVE-2017-13227.