CVE-2017-0603: Integer Overflow

Published May 1, 2017

Updated

A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35763994.

Affected Software

30 affected components

Google Android=4.0

Google Android=4.0.1

Google Android=4.0.2

Google Android=4.0.3

Google Android=4.0.4

Google Android=4.1

Google Android=4.1.2

Google Android=4.2

Google Android=4.2.1

Google Android=4.2.2

Google Android=4.3

Google Android=4.3.1

Google Android=4.4

Google Android=4.4.1

Google Android=4.4.2

Google Android=4.4.3

Google Android=4.4.4

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android

Event History

May 1, 2017

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

May 12, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0603?

The severity of CVE-2017-0603 is rated as Moderate.

How do I fix CVE-2017-0603?

To fix CVE-2017-0603, update affected Android devices to a version beyond the vulnerable releases.

What versions of Android are affected by CVE-2017-0603?

CVE-2017-0603 affects Android versions 4.0 to 6.0, including specific releases like 4.4.4 and 5.1.1.

What type of vulnerability is CVE-2017-0603?

CVE-2017-0603 is a denial of service vulnerability in the libstagefright component of Mediaserver.

Can CVE-2017-0603 cause a device to completely shut down?

Yes, CVE-2017-0603 can cause a device to hang or reboot when exploited.