CVE-2017-0770

High

Published: 08/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2017-0770 is a privilege escalation vulnerability in the Android media framework (libmediaplayerservice). It affects Android versions from 4.4.4 to 8.0.

Risk Assessment

An attacker could exploit this vulnerability to gain elevated privileges on the system, potentially leading to unauthorized access to device data or functions.

Recommendation

It is recommended to update the Android system to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in libmediaplayerservice

CVE-2016-0811High
Integer overflow in the BnCrypto::onTransact function in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information and bypass an unspecified protection mechanism by triggering an improper size calculation.

Original NVD description (English source)

A elevation of privilege vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38234812.