CVE-2017-0663

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.

• CWE-787

• http://www.debian.org/security/2017/dsa-3952
• http://www.securityfocus.com/bid/98877Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038623
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://security.gentoo.org/glsa/201711-01
• https://source.android.com/security/bulletin/2017-06-01Vendor Advisory
• http://www.debian.org/security/2017/dsa-3952
• http://www.securityfocus.com/bid/98877Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038623
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://security.gentoo.org/glsa/201711-01
• https://source.android.com/security/bulletin/2017-06-01Vendor Advisory

Published

Jun 14, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0646An information disclosure vulnerability in Bluetooth compone…
• CVE-2017-0647An information disclosure vulnerability in libziparchive cou…
• CVE-2017-0648An elevation of privilege vulnerability in the kernel FIQ de…
• CVE-2017-0649An elevation of privilege vulnerability in the MediaTek soun…
• CVE-2017-0650An information disclosure vulnerability in the Synaptics tou…
• CVE-2017-0651An information disclosure vulnerability in the kernel ION su…
• CVE-2017-0664A elevation of privilege vulnerability in the Android framew…
• CVE-2017-0665A elevation of privilege vulnerability in the Android framew…
• CVE-2017-0666A elevation of privilege vulnerability in the Android framew…
• CVE-2017-0667A elevation of privilege vulnerability in the Android framew…
• CVE-2017-0668A information disclosure vulnerability in the Android framew…
• CVE-2017-0669A information disclosure vulnerability in the Android framew…