Description
An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Android | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Android Janus APK Signature bypass
exploit/android/local/janus
Exploit-DB 1
- Android Janus - APK Signature Bypass (Metasploit) EDB-47601 · local · Nov 8, 2019 · verified
GitHub 6 repositories
-
xyzAsian/Janus-CVE-2017-13156 ★ 15 · Dec 29, 2017
-
tea9/CVE-2017-13156-Janus ★ 12 · Sep 3, 2020
CVE-2017-13156-Janus复现
-
giacomoferretti/janus-toolkit ★ 11 · Aug 25, 2019
A collection of tools for the Janus exploit [CVE-2017-13156].
-
hackerronin/Janus-Vulnerability-CVE-2017-13156-Exploit ★ 3 · Feb 20, 2024
Android Application Vulnerability Exploit
-
M507/CVE-2017-13156 ★ 3 · Jun 10, 2022
To determine if an APK is vulnerable to CVE-2017-13156
-
nictjh/threatDemos ★ 2 · Aug 1, 2025
Comprehensive Android security vulnerability demonstrations featuring CVE-2017-13156 (Janus), broadcast receiver exploitation, external storage threats, and rooted device attacks. Educational PoCs wi…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.