CVE-2017-0587

A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35219737.

• CWE-119

• http://www.securityfocus.com/bid/98119Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/external/libmpeg2/+/a86eb798d077b9b25c8f8c77e3c02c2f287c1ce7Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98119Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/external/libmpeg2/+/a86eb798d077b9b25c8f8c77e3c02c2f287c1ce7Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory

Published

May 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0581An elevation of privilege vulnerability in the Synaptics Tou…
• CVE-2017-0582An elevation of privilege vulnerability in the HTC OEM fastb…
• CVE-2017-0583An elevation of privilege vulnerability in the Qualcomm CP a…
• CVE-2017-0584An information disclosure vulnerability in the Qualcomm Wi-F…
• CVE-2017-0585An information disclosure vulnerability in the Broadcom Wi-F…
• CVE-2017-0586An information disclosure vulnerability in the Qualcomm soun…
• CVE-2017-0588A remote code execution vulnerability in id3/ID3.cpp in libs…
• CVE-2017-0589A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0590A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0591A remote code execution vulnerability in libavc in Mediaserv…
• CVE-2017-0592A remote code execution vulnerability in FLACExtractor.cpp i…
• CVE-2017-0593An elevation of privilege vulnerability in the Framework API…