CVEvulnerability

CVE-2017-0409

7.8 HIGH Published 2017-02-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-02-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31999646.

Affected configurations

• google android 6.0 • google android 6.0.1 • google android 7.0 • google android 7.1.0 • google android 7.1.1

References