CVE-2017-0538

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33641588.

• CWE-119

• http://www.securityfocus.com/bid/97330Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038201
• https://android.googlesource.com/platform/external/libavc/+/494561291a503840f385fbcd11d9bc5f4dc502b8Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-04-01Vendor Advisory
• http://www.securityfocus.com/bid/97330Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038201
• https://android.googlesource.com/platform/external/libavc/+/494561291a503840f385fbcd11d9bc5f4dc502b8Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-04-01Vendor Advisory

Published

Apr 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0532An information disclosure vulnerability in the MediaTek vide…
• CVE-2017-0533An information disclosure vulnerability in the Qualcomm vide…
• CVE-2017-0534An information disclosure vulnerability in the Qualcomm vide…
• CVE-2017-0535An information disclosure vulnerability in the HTC sound cod…
• CVE-2017-0536An information disclosure vulnerability in the Synaptics tou…
• CVE-2017-0537An information disclosure vulnerability in the kernel USB ga…
• CVE-2017-0539A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0540A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0541A remote code execution vulnerability in sonivox in Mediaser…
• CVE-2017-0542A remote code execution vulnerability in libavc in Mediaserv…
• CVE-2017-0543A remote code execution vulnerability in libavc in Mediaserv…
• CVE-2017-0544An elevation of privilege vulnerability in CameraBase could …