Skip to content
OpenAdvisories
Unscored CVE-2017-0638 EUVD-2017-0992GHSA-2v9h-j3m9-v858

A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to execute arbitrary c…

Published Jun 14, 2017 · Updated Aug 5, 2024 · Assigned by google_android

Description

A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High because it is a remote arbitrary code execution in an unprivileged process. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36368305.

Affected products

VendorProductAffectedFixed
Google Android Android-7.1.1 Android-7.1.2 —

References