CVE-2017-0588: Buffer Overflow
A remote code execution vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34618607.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0588?
CVE-2017-0588 is rated as Critical due to its potential for remote code execution.
How does CVE-2017-0588 facilitate exploitation?
CVE-2017-0588 allows an attacker to exploit memory corruption during media file processing.
Which versions of Android are affected by CVE-2017-0588?
CVE-2017-0588 affects multiple versions of Android, including versions 4.0 through 7.1.2.
How can I mitigate CVE-2017-0588?
To mitigate CVE-2017-0588, update your Android device to the latest security patch provided by Google.
What type of vulnerability is CVE-2017-0588?
CVE-2017-0588 is a remote code execution vulnerability found in libstagefright.