CVE-2017-0539

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33864300.

• CWE-119

• http://www.securityfocus.com/bid/97330Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038201
• https://android.googlesource.com/platform/external/libhevc/+/1ab5ce7e42feccd49e49752e6f58f9097ac5d254Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-04-01Vendor Advisory
• http://www.securityfocus.com/bid/97330Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038201
• https://android.googlesource.com/platform/external/libhevc/+/1ab5ce7e42feccd49e49752e6f58f9097ac5d254Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-04-01Vendor Advisory

Published

Apr 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0533An information disclosure vulnerability in the Qualcomm vide…
• CVE-2017-0534An information disclosure vulnerability in the Qualcomm vide…
• CVE-2017-0535An information disclosure vulnerability in the HTC sound cod…
• CVE-2017-0536An information disclosure vulnerability in the Synaptics tou…
• CVE-2017-0537An information disclosure vulnerability in the kernel USB ga…
• CVE-2017-0538A remote code execution vulnerability in libavc in Mediaserv…
• CVE-2017-0540A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0541A remote code execution vulnerability in sonivox in Mediaser…
• CVE-2017-0542A remote code execution vulnerability in libavc in Mediaserv…
• CVE-2017-0543A remote code execution vulnerability in libavc in Mediaserv…
• CVE-2017-0544An elevation of privilege vulnerability in CameraBase could …
• CVE-2017-0545An elevation of privilege vulnerability in Audioserver could…