CVE-2017-0478

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33718716.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Mar 8, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-04797.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04807.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04817.8An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a privilegeCVE-2017-04825.5A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. CVE-2017-04835.5A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. CVE-2017-04845.5A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. CVE-2017-04855.5A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. CVE-2017-04865.5A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. CVE-2017-04875.5A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. CVE-2017-04885.5A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. CVE-2017-04895.5An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protectionCVE-2017-04905.5An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Mode
CVE-2017-0478: High severity, CVSS 7.8 | Vulnix