Skip to content
Sign in
Not rated

CVE-2017-0590 A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted…

Description

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35039946.

Affected products and versions

Product Affected versions Fixed in
Android 7.1 7.1.1 → 7.1.2 No fix stated
Android 7.0 No fix stated
Android 6.0 6.0 → 6.0.1 No fix stated
Android 5.1.1 No fix stated
Android 5.0.2 No fix stated

Other CVEs of Android

The 960 CVEs of Android →
CVE-2018-9573 In impd_parse_filt_block of impd_drc_dynamic_payload.c there is a possible out of bounds write due to missing bounds… Not rated CVE-2018-9574 In impd_parse_split_drc_characteristic of impd_drc_static_payload.c there is a possible out of bounds write due to… Not rated CVE-2018-9577 In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of bounds write due to… Not rated CVE-2018-9571 In impd_parse_loud_eq_instructions of impd_drc_dynamic_payload.c there is a possible out-of-bound write due to missing… Not rated
Track this CVE