PT-2017-10628 · Google · Android+1

Alejandro Cabrera Aldaya + 3 · Published 2017-08-09 · Updated 2019-10-03 · CVE-2017-0737

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2

Description A elevation of privilege vulnerability exists in the Android media framework, specifically in libstagefright.

Recommendations For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2017-0737

Affected Products

Android

Libstagefright

References · 5

• https://osv.dev/vulnerability/CVE-2017-0737 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0737 · Security Note
• https://usn.ubuntu.com/3692-2 · Vendor Advisory
• https://source.android.com/security/bulletin/2017-08-01 · Vendor Advisory
• http://securityfocus.com/bid/100204 · Note