CVEvulnerability
CVE-2017-0477
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-03-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 7.1.1. Android ID: A-33621647.
Affected configurations
• google android 7.0
• google android 7.1.0
• google android 7.1.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/96760 www.securityfocus.com
- http://www.securitytracker.com/id/1037968 www.securitytracker.com
- https://source.android.com/security/bulletin/2017-03-01 source.android.com
- https://source.android.com/security/bulletin/2017-03-01.html Vendor Advisory
- http://www.securityfocus.com/bid/96760 www.securityfocus.com
- http://www.securitytracker.com/id/1037968 www.securitytracker.com
- https://source.android.com/security/bulletin/2017-03-01 source.android.com