CVE-2017-0599: Medium severity Google Android vulnerability
A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34672748.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to do to trigger this issue?
The attacker needs to get a user to interact with a specially crafted file. The CVSS vector indicates no privileges are required, but user interaction is required.
What is the practical impact if exploitation succeeds?
Successful exploitation can cause the device to hang or reboot through a denial of service in libhevc used by Mediaserver. The provided CVSS metrics indicate availability impact only, with no stated confidentiality or integrity impact.
Which Android versions are listed as affected?
The affected versions listed are Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.