CVE-2017-13233: In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion.

Security readout for executives and security teams

CVE-2017-13233 is an Android media-processing flaw that can temporarily disrupt an affected device. The source describes resource exhaustion in libhevc, requiring user interaction and no extra privileges. The available evidence points to denial of service, not data theft or code execution. Exposure is mainly legacy Android devices running the listed versions, especially where users can interact with untrusted media content. Modern, patched, or unsupported-retired devices are less likely to remain exposed, but the source bundle does not provide device-specific patch status. Treat this as a moderate legacy-device risk. It can disrupt availability but the sources do not support code execution, privilege escalation, or active exploitation. Prioritize remediation where affected Android devices are still business-critical or user-facing. Mitigation focus: Apply Android vendor security updates covering the February 2018 bulletin where available.; Retire or isolate unsupported Android devices on affected versions.; Limit user exposure to untrusted media content on unpatched devices..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.