CVE-2017-0409

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31999646.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
Google Inc.AndroidAndroid-6.0; Android-6.0.1; Android-7.0; Android-7.1.1

References

Timeline

Published
Feb 8, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-04107.8An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within thCVE-2017-04117.8An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within thCVE-2017-04127.8An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within thCVE-2017-04135.5An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections CVE-2017-04145.5An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections CVE-2017-04157.8An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04167.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04177.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04187.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04197.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04205.5An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that CVE-2017-04215.5An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protecti
CVE-2017-0409: High severity, CVSS 7.8 | Vulnix