CVE-2017-0644: Medium severity Google Android vulnerability

Published Jun 5, 2017

Updated

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1. Android ID: A-35472997.

Affected Software

6 affected components

Google Android=4.4.4

Google Android=5.0.2

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android

Event History

Jun 5, 2017

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Jun 14, 2017

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0644?

CVE-2017-0644 is rated as High severity due to its potential for remote denial of service.

How do I fix CVE-2017-0644?

To fix CVE-2017-0644, update your Android device to the latest security patch that addresses this vulnerability.

Which Android versions are affected by CVE-2017-0644?

CVE-2017-0644 affects Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, and 6.0.1.

What type of attack does CVE-2017-0644 facilitate?

CVE-2017-0644 allows an attacker to execute a remote denial of service attack, potentially causing the device to hang or reboot.

Is there a workaround for CVE-2017-0644?

There is no specific workaround for CVE-2017-0644; the best mitigation is to apply the necessary updates from the device manufacturer.