CVE-2017-0382

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32338390.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jan 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-03837.8An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within th CVE-2017-03847.8An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious a CVE-2017-03857.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte CVE-2017-03867.8An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the CVE-2017-03877.8An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the conte CVE-2017-03885.5An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external s CVE-2017-03897.5A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a devic CVE-2017-03905.5A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause a CVE-2017-03915.5A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to use a specially cra CVE-2017-03925.5A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially craft CVE-2017-03935.5A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device CVE-2017-03947.5A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot. This issue is rated as High