CVE-2017-0390: High severity android vulnerability

Published Jan 3, 2017

Updated

A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31647370.

Affected Software

28 affected components

Google Android=4.0

Google Android=4.0.1

Google Android=4.0.2

Google Android=4.0.3

Google Android=4.0.4

Google Android=4.1

Google Android=4.1.2

Google Android=4.2

Google Android=4.2.1

Google Android=4.2.2

Google Android=4.3

Google Android=4.3.1

Google Android=4.4

Google Android=4.4.1

Google Android=4.4.2

Google Android=4.4.3

Google Android=4.4.4

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.0

Google Android

Remediation

Patch Available

https://android.googlesource.com/platform/external/tremolo/+/5dc99237d49e73c27d3eca54f6ccd97d13f94de0

Event History

Jan 3, 2017

CVE Published

via Android·12:00 AM

Jan 12, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via NVD·08:59 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-0390?

CVE-2017-0390 is rated as High due to its potential for remote denial of service.

How can I mitigate CVE-2017-0390?

To mitigate CVE-2017-0390, users should update their Android devices to the latest security versions provided by Google.

What type of vulnerability is CVE-2017-0390?

CVE-2017-0390 is a denial of service vulnerability affecting the Mediaserver component in Android.

Which Android versions are affected by CVE-2017-0390?

CVE-2017-0390 affects multiple Android versions including 4.4.4, 5.0.2, 5.1.1, 6.0, and potentially earlier versions.

Who is impacted by CVE-2017-0390?

Any user of the affected Android versions is impacted by the denial of service vulnerability in CVE-2017-0390.