CVE-2017-13272: In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free.

Security readout for executives and security teams

CVE-2017-13272 is an Android flaw that could let a remote attacker gain higher privileges without user interaction. The listed affected versions are Android 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. The provided sources do not include CVSS scoring or evidence of active exploitation. Exposure is most relevant to Android devices running the listed versions without the vendor security update covering CVE-2017-13272. Downstream OEM patch status matters, because Android fixes are often delivered through device vendors and carriers. Unsupported legacy devices are the main concern. Prioritize remediation for managed Android fleets that still include unsupported 7.x or 8.x devices. The business risk is privilege escalation on endpoints, but urgency depends on fleet presence and patch status because the provided sources do not show active exploitation. Mitigation focus: Check Google and OEM guidance for CVE-2017-13272 coverage.; Update affected Android devices to a security patch level that includes the fix.; Prioritize replacement or isolation for unsupported Android 7.x and 8.x devices..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.