CVE-2017-0588

A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34618607.

• CWE-119

• http://www.securityfocus.com/bid/98120Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/av/+/6f1d990ce0f116a205f467d9eb2082795e33872bIssue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98120Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/av/+/6f1d990ce0f116a205f467d9eb2082795e33872bIssue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory

Published

May 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0582An elevation of privilege vulnerability in the HTC OEM fastb…
• CVE-2017-0583An elevation of privilege vulnerability in the Qualcomm CP a…
• CVE-2017-0584An information disclosure vulnerability in the Qualcomm Wi-F…
• CVE-2017-0585An information disclosure vulnerability in the Broadcom Wi-F…
• CVE-2017-0586An information disclosure vulnerability in the Qualcomm soun…
• CVE-2017-0587A remote code execution vulnerability in libmpeg2 in Mediase…
• CVE-2017-0589A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0590A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0591A remote code execution vulnerability in libavc in Mediaserv…
• CVE-2017-0592A remote code execution vulnerability in FLACExtractor.cpp i…
• CVE-2017-0593An elevation of privilege vulnerability in the Framework API…
• CVE-2017-0594An elevation of privilege vulnerability in codecs/aacenc/Sof…