CVE-2017-0756: High severity Google Android vulnerability
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate CVE-related remote code execution in the Android media framework (libstagefright) by applying Android’s vendor-provided security patch for Android ID: A-34621073 for all affected versions (4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2).
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0756?
CVE-2017-0756 is classified as a critical remote code execution vulnerability in the Android media framework.
How do I fix CVE-2017-0756?
To fix CVE-2017-0756, users should update their Android devices to a patched version that is not affected by this vulnerability.
Which Android versions are affected by CVE-2017-0756?
CVE-2017-0756 affects Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.
What kind of attacks can exploit CVE-2017-0756?
CVE-2017-0756 can be exploited to execute arbitrary code remotely, potentially allowing attackers to gain control of an affected device.
Is there a mitigation for CVE-2017-0756?
The primary mitigation for CVE-2017-0756 is to apply the security updates provided by Google for the affected Android versions.