CVE-2017-0847: Critical severity Google Android vulnerability
An elevation of privilege vulnerability in the Android media framework (mediaanalytics). Product: Android. Versions: 8.0. Android ID: A-65540999.
Affected Software
Remediation
Event History
Frequently Asked Questions
What level of attacker access is required to exploit this issue?
The vulnerability is remotely exploitable over the network with low attack complexity and requires no privileges or user interaction, according to the CVSS vector. Its impact is rated high for confidentiality, integrity, and availability.
Which Android deployments should be prioritized for assessment?
The affected version identified in the available data is Android 8.0, in the mediaanalytics component of the Android media framework. The data does not identify a configuration prerequisite or indicate that a non-default configuration is required.
What should teams do to remediate the vulnerability?
A patch is available. Organizations should apply the available Android security update for affected Android 8.0 devices and use Android ID A-65540999 to track the issue with their device or platform provider.