CVE-2017-0591

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34097672.

• CWE-119

• http://www.securityfocus.com/bid/98124Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/external/libavc/+/5c3fd5d93a268abb20ff22f26009535b40db3c7dIssue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98124Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/external/libavc/+/5c3fd5d93a268abb20ff22f26009535b40db3c7dIssue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory

Published

May 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0585An information disclosure vulnerability in the Broadcom Wi-F…
• CVE-2017-0586An information disclosure vulnerability in the Qualcomm soun…
• CVE-2017-0587A remote code execution vulnerability in libmpeg2 in Mediase…
• CVE-2017-0588A remote code execution vulnerability in id3/ID3.cpp in libs…
• CVE-2017-0589A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0590A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0592A remote code execution vulnerability in FLACExtractor.cpp i…
• CVE-2017-0593An elevation of privilege vulnerability in the Framework API…
• CVE-2017-0594An elevation of privilege vulnerability in codecs/aacenc/Sof…
• CVE-2017-0595An elevation of privilege vulnerability in libstagefright in…
• CVE-2017-0596An elevation of privilege vulnerability in libstagefright in…
• CVE-2017-0597An elevation of privilege vulnerability in Audioserver could…