Description
An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32706020.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Android | Android-6.0, Android-6.0.1, Android-7.0, Android-7.1.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | android | No fix yet | — |
References
- 96089 vdb-entry
- 1037798 vdb-entry
- https://source.android.com/security/bulletin/2017-02-01.html