CVE-2017-0391: vulnerability facts

CVE-2017-0391

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32322258.

CVSS 5.5 · Medium · EPSS 0.8%

Published: 2017-01-12T20:00:00.000Z
Updated: 2024-08-05T13:03:57.060Z

Stack: system

Affected products and versions

android
Versions
- Android-6.0: Affected
- Android-6.0.1: Affected
- Android-7.0: Affected
- Android-7.1: Affected
No fix published
android Ubuntu:16.04:LTS
Versions
- 20150818-1500-0ubuntu2
- 20150818-1500-0ubuntu3
- 20160307-0742-0ubuntu3
- 20160330-0939-0ubuntu1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published

Original sources

https://android.googlesource.com/platform/external/libhevc/+/a33f6725d7e9f92330f995ce2dcf4faa33f6433f
https://source.android.com/security/bulletin/2017-01-01.html
http://www.securityfocus.com/bid/95230
http://www.securitytracker.com/id/1038623
https://nvd.nist.gov/vuln/detail/CVE-2017-0391

Check your server →

CVE-2017-0391

Affected products and versions

android

android Ubuntu:16.04:LTS

Original sources