Vulnerabilities > CVE-2017-0635 - NULL Pointer Dereference vulnerability in Google Android

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
google
CWE-476
NVD
Published: 2017-05-12
Updated: 2024-11-21

Summary

A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-35467107.

Vulnerable Configurations

Part Description Count
OS
Google
4

Common Weakness Enumeration (CWE)

References