Skip to content
OpenAdvisories
Unscored CVE-2017-0811 EUVD-2017-1165GHSA-mhcr-fv3g-w2ww

A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, …

Published Oct 3, 2017 · Updated Sep 17, 2024 · Assigned by google_android

Vendor: Google Product: Android Package: android Platform: Android Ecosystem: Ubuntu

Description

A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37930177.

Affected products

VendorProductAffectedFixed
Google Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS android No fix yet —

References