CVE-2017-0397: Infoleak
An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32377688.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0397?
CVE-2017-0397 is rated as Moderate due to its potential to enable access to sensitive data without permission.
How do I fix CVE-2017-0397?
To fix CVE-2017-0397, update your Android device to a version that includes the security patch addressing this vulnerability.
What types of devices are affected by CVE-2017-0397?
CVE-2017-0397 affects various versions of Android starting from 4.0 up to 7.1.0.
What can an attacker do with CVE-2017-0397?
An attacker exploiting CVE-2017-0397 may be able to access data outside of the application’s permitted access.
Is CVE-2017-0397 a remote or local attack vulnerability?
CVE-2017-0397 is a local attack vulnerability, requiring the attacker to have physical access to the device.