CVE-2017-0476
Last modified
CVE-2017-0476 is a vulnerability of currently unknown severity. A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged process. EPSS estimates a 1.05% chance of exploitation in the next 30 days.
Description
A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33388925.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 6.0 | |
| Android | 6.0.1 | |
| Android | 7.0 | |
| Android | 7.1.0 | |
| Android | 7.1.1 |
References
- https://source.android.com/security/bulletin/2017-03-01.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-0476?
How severe is CVE-2017-0476?
How do I fix CVE-2017-0476?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-0470A remote code execution vulnerability in Mediaserver could e…
- CVE-2017-0471A remote code execution vulnerability in Mediaserver could e…
- CVE-2017-0472A remote code execution vulnerability in Mediaserver could e…
- CVE-2017-0473A remote code execution vulnerability in Mediaserver could e…
- CVE-2017-0474A remote code execution vulnerability in Mediaserver could e…
- CVE-2017-0475An elevation of privilege vulnerability in the recovery veri…
- CVE-2017-0477A remote code execution vulnerability in libgdx could enable…
- CVE-2017-0478A remote code execution vulnerability in the Framesequence l…
- CVE-2017-0479An elevation of privilege vulnerability in Audioserver could…
- CVE-2017-0480An elevation of privilege vulnerability in Audioserver could…
- CVE-2017-0481An elevation of privilege vulnerability in NFC could enable …
- CVE-2017-0482A denial of service vulnerability in Mediaserver could enabl…
Are you affected by CVE-2017-0476?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
