CVE-2017-0405
HighSummary
A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows for remote code execution, potentially leading to full control over the affected Android device.
Recommendation
It is recommended to update Android to the latest version to mitigate this vulnerability and to monitor devices for potential attack attempts.
Other vulnerabilities in Surfaceflinger
See all- CVE-2026-20511Unknown
In SurfaceFlinger, there is a possible memory corruption due to use-after-free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.
- CVE-2017-0546High
A vulnerability in SurfaceFlinger allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
Original NVD description (English source)
A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-31960359.