CVE-2017-13241: A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc).

Security readout for executives and security teams

CVE-2017-13241 is an Android information disclosure issue in the media framework component libstagefright_soft_avcenc. The sources list Android 5.1.1 through 8.1 as affected. Business urgency depends on whether any managed devices still run unpatched builds from those versions. Organizations may be exposed if Android devices remain on affected, unpatched 5.1.1, 6.x, 7.x, or 8.x builds. Risk is lower for devices with later Android versions or OEM security updates covering the February 2018 bulletin. Prioritize this during mobile fleet hygiene, especially for legacy Android devices. It is not KEV-listed in the provided data, but unsupported Android versions create broader security risk beyond this CVE. Mitigation focus: Inventory Android devices and OS versions across managed and BYOD fleets.; Check OEM security patch levels against the February 2018 Android/Pixel bulletin.; Update affected devices using vendor-supported firmware or security updates..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.