CVE-2017-0850 — Sensitive Information Exposure in INC Android

CWE-200 — Sensitive Information Exposure3 documents3 sources

Severity

5.3MEDIUMNVD

EPSS

0.1%

top 70.94%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google INC Android Google Android

Timeline

PublishedNov 16

Latest updateMay 17

Description

An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-64836941.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDgoogle/android7.0, 7.1.1, 7.1.2+2

▶CVEListV5google_inc/android7.0, 7.1.1, 7.1.2+2

Patches

Patch: source.android.com ↗Patch: source.android.com ↗

🔴Vulnerability Details

GHSA

GHSA-pmcv-4f88-h62f: An information disclosure vulnerability in the Android media framework (libstagefright)↗2022-05-17

▶

CVEList

CVE-2017-0850: An information disclosure vulnerability in the Android media framework (libstagefright)↗2017-11-16

▶