CVE-2017-13232: In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not...

Security readout for executives and security teams

CVE-2017-13232 is an Android audioserver flaw that could expose information locally. The issue affects Android 5.1.1 through 8.1. It does not require user interaction or extra execution privileges, but the provided sources do not show remote exploitation or active exploitation. Exposure is most likely on Android devices running affected versions 5.1.1, 6.x, 7.x, 8.0, or 8.1 without the relevant February 2018 Android security fixes from the device vendor. Treat this as a legacy Android hygiene issue unless vulnerable devices remain in use. The business priority is identifying outdated endpoints and removing unsupported Android versions from sensitive workflows. Mitigation focus: Apply vendor Android security updates covering the February 2018 bulletin.; Confirm OEM or carrier firmware includes the relevant Android security patch.; Prioritize unsupported Android versions for upgrade or replacement..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.