CVE-2017-0382: High severity android vulnerability

Published Jan 3, 2017

Updated

A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32338390.

Affected Software

11 affected components

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.0

Google Android

Event History

Jan 3, 2017

CVE Published

via Android·12:00 AM

Jan 12, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via NVD·08:59 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-0382?

CVE-2017-0382 is rated as High due to its potential for remote code execution.

What versions of Android are affected by CVE-2017-0382?

CVE-2017-0382 affects Android versions 5.0 through 7.1.0.

How do I fix CVE-2017-0382?

To fix CVE-2017-0382, you should update your Android device to the latest security patch provided by Google.

What type of vulnerability is CVE-2017-0382?

CVE-2017-0382 is a remote code execution vulnerability.

What can an attacker achieve by exploiting CVE-2017-0382?

An attacker can execute arbitrary code in the context of an unprivileged process by exploiting CVE-2017-0382.