CVE-2017-0838 — INC Android vulnerability

3 documents3 sources

Severity

7.8HIGHNVD

EPSS

0.0%

top 97.58%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google INC Android Google Android

Timeline

PublishedNov 16

Latest updateMay 13

Description

An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-63522818.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDgoogle/android7.0, 7.1.1, 7.1.2+2

▶CVEListV5google_inc/android7.0, 7.1.1, 7.1.2+2

Patches

Patch: source.android.com ↗Patch: source.android.com ↗

🔴Vulnerability Details

GHSA

GHSA-4p3c-28x4-hm9j: An elevation of privilege vulnerability in the Android media framework (libstagefright)↗2022-05-13

▶

CVEList

CVE-2017-0838: An elevation of privilege vulnerability in the Android media framework (libstagefright)↗2017-11-16

▶