CVE-2017-0643: Medium severity Google Android vulnerability

Published Jun 5, 2017

Updated

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-35645051.

Affected Software

7 affected components

Google Android=5.0.2

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android

Event History

Jun 5, 2017

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Jun 14, 2017

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0643?

CVE-2017-0643 is rated as High severity due to the potential for remote denial of service.

How do I fix CVE-2017-0643?

To fix CVE-2017-0643, it is recommended to update your Android device to the latest security patch provided by Google.

Which versions of Android are affected by CVE-2017-0643?

CVE-2017-0643 affects Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1.

What type of vulnerability is CVE-2017-0643?

CVE-2017-0643 is a remote denial of service vulnerability in the Mediaserver component of Android.

Can CVE-2017-0643 cause a complete device reboot?

Yes, CVE-2017-0643 can cause a device to hang or reboot when exploited with a specially crafted file.