VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 6, 2017· Updated May 13, 2026

CVE-2017-13167

CVE-2017-13167

Description

An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

An elevation of privilege vulnerability in the kernel sound timer of Android kernel allows local privilege escalation.

Vulnerability

The vulnerability resides in the kernel sound timer of the Android kernel. It is an elevation of privilege (EoP) flaw, as identified by Android ID A-37240993. The affected versions are the Android kernel, across supported Google Pixel and Nexus devices prior to the 2017-12-05 security patch level [1].

Exploitation

An attacker requires local access to the device. The exact exploitation steps are not detailed in the available references, but as an elevation of privilege vulnerability in the kernel, it is likely exploited by executing a crafted application that triggers the flaw in the sound timer component to gain elevated privileges [1].

Impact

Successful exploitation allows an attacker to elevate their privileges within the kernel context, potentially gaining higher-level permissions than originally granted. This could lead to full compromise of the device's confidentiality, integrity, and availability, although the specific scope is not further defined in the references [1].

Mitigation

Google released a fix as part of the 2017-12-05 security patch level. All supported Google Pixel and Nexus devices should accept the OTA update or flash the firmware images available on the Google Developer site. Devices with a security patch level of 2017-12-05 or later are not affected [1]. No workarounds are provided, and the device must be patched.

References
  1. Pixel / Nexus Security Bulletin—December 2017

AI Insight generated on May 22, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

60

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.