CVE-2017-0592

A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34970788.

• CWE-119

• http://www.securityfocus.com/bid/98125Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/av/+/acc192347665943ca674acf117e4f74a88436922Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98125Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/av/+/acc192347665943ca674acf117e4f74a88436922Issue Tracking, Patch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-05-01Patch, Vendor Advisory

Published

May 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0586An information disclosure vulnerability in the Qualcomm soun…
• CVE-2017-0587A remote code execution vulnerability in libmpeg2 in Mediase…
• CVE-2017-0588A remote code execution vulnerability in id3/ID3.cpp in libs…
• CVE-2017-0589A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0590A remote code execution vulnerability in libhevc in Mediaser…
• CVE-2017-0591A remote code execution vulnerability in libavc in Mediaserv…
• CVE-2017-0593An elevation of privilege vulnerability in the Framework API…
• CVE-2017-0594An elevation of privilege vulnerability in codecs/aacenc/Sof…
• CVE-2017-0595An elevation of privilege vulnerability in libstagefright in…
• CVE-2017-0596An elevation of privilege vulnerability in libstagefright in…
• CVE-2017-0597An elevation of privilege vulnerability in Audioserver could…
• CVE-2017-0598An information disclosure vulnerability in the Framework API…