CVE-2017-0637

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34064500.

• CWE-119

• http://www.securityfocus.com/bid/98868Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038623
• https://android.googlesource.com/platform/external/libhevc/+/ebaa71da6362c497310377df509651974401d258Issue Tracking, Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2017-06-01Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98868Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038623
• https://android.googlesource.com/platform/external/libhevc/+/ebaa71da6362c497310377df509651974401d258Issue Tracking, Patch, Vendor Advisory
• https://source.android.com/security/bulletin/2017-06-01Patch, Vendor Advisory

Published

Jun 14, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0631An information disclosure vulnerability in the Qualcomm came…
• CVE-2017-0632An information disclosure vulnerability in the Qualcomm soun…
• CVE-2017-0633An information disclosure vulnerability in the Broadcom Wi-F…
• CVE-2017-0634An information disclosure vulnerability in the Synaptics tou…
• CVE-2017-0635A remote denial of service vulnerability in HevcUtils.cpp in…
• CVE-2017-0636An elevation of privilege vulnerability in the MediaTek comm…
• CVE-2017-0638A remote code execution vulnerability in System UI component…
• CVE-2017-0639An information disclosure vulnerability in Bluetooth compone…
• CVE-2017-0640A remote denial of service vulnerability in Mediaserver coul…
• CVE-2017-0641A remote denial of service vulnerability in libvpx in Medias…
• CVE-2017-0642A remote denial of service vulnerability in libhevc in Media…
• CVE-2017-0643A remote denial of service vulnerability in Mediaserver coul…