CVE-2017-0635: Null Pointer Dereference
A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35467107.
Affected Software
Event History
Frequently Asked Questions
Which Android versions are identified as affected?
The affected versions listed are Android 7.0, 7.1.1, and 7.1.2.
What must an attacker do to trigger the issue?
An attacker needs to cause the device to process a specially crafted file. The CVSS vector indicates local access, no privileges, and user interaction are required.
What is the expected impact if exploitation succeeds?
Successful exploitation can cause the device to hang or reboot, resulting in a denial of service. No confidentiality or integrity impact is listed.
Where in Android does the flaw occur?
The issue is a null pointer dereference in HevcUtils.cpp within libstagefright in Mediaserver.