CVE-2017-0392: High severity android vulnerability

Published Jan 3, 2017

Updated

A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32577290.

Affected Software

28 affected components

Google Android=4.0

Google Android=4.0.1

Google Android=4.0.2

Google Android=4.0.3

Google Android=4.0.4

Google Android=4.1

Google Android=4.1.2

Google Android=4.2

Google Android=4.2.1

Google Android=4.2.2

Google Android=4.3

Google Android=4.3.1

Google Android=4.4

Google Android=4.4.1

Google Android=4.4.2

Google Android=4.4.3

Google Android=4.4.4

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.0

Google Android

Remediation

Patch Available

https://android.googlesource.com/platform/frameworks/av/+/453b351ac5bd2b6619925dc966da60adf6b3126c

Event History

Jan 3, 2017

CVE Published

via Android·12:00 AM

Jan 12, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via NVD·08:59 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-0392?

CVE-2017-0392 is rated as High due to its potential for remote denial of service.

How do I fix CVE-2017-0392?

To fix CVE-2017-0392, update your Android device to the latest security patch provided by Google.

What devices are affected by CVE-2017-0392?

CVE-2017-0392 affects various Android versions including 4.0 through 5.1.1 and certain specific build versions.

Can CVE-2017-0392 be exploited remotely?

Yes, CVE-2017-0392 can be exploited remotely through specially crafted files.

What impact does CVE-2017-0392 have on my device?

CVE-2017-0392 can cause a device hang or reboot, leading to a denial of service.