Skip to content
OpenAdvisories
Unscored CVE-2017-0476 EUVD-2017-0830GHSA-mcc8-9378-x3rg

A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption …

Published Mar 8, 2017 · Updated Aug 5, 2024 · Assigned by google_android

Vendor: Google Product: Android Package: android Platform: Android Ecosystem: Ubuntu

Description

A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33388925.

Affected products

VendorProductAffectedFixed
Google Android Android-6.0, Android-6.0.1, Android-7.0, Android-7.1.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS android No fix yet —

References