PT-2017-2848 · Google · Android+1

Mingjian Zhou + 1 · Published 2017-06-19 · Updated 2019-10-03 · CVE-2017-0769

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2, 8.0

Description The issue is related to an elevation of privilege vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with insufficient access control, which can be exploited by a remote attacker to gain elevated privileges.

Recommendations For Android versions 7.0, 7.1.1, 7.1.2, 8.0, update to a version that includes the fix for the libstagefright library issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-264

CWE-404

Related Identifiers

BDU:2017-02128

CVE-2017-0769

Affected Products

Android

Libstagefright

References · 5

• https://source.android.com/security/bulletin/2017-09-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-0769 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0769 · Security Note
• https://bdu.fstec.ru/vul/2017-02128 · Security Note
• http://securityfocus.com/bid/100649 · Note