Vulnerabilities > CVE-2017-0409 - Arbitrary Code Execution vulnerability in Google Android libstagefright
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL network
google
Summary
A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31999646.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 5 |