CVE-2017-0840
HighSummary
CVE-2017-0840 is an information disclosure vulnerability in the Android media framework (libstagefright). It affects Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
Risk Assessment
Information disclosure may lead to user data leakage, posing a serious threat to the privacy and security of the organization.
Recommendation
It is recommended to update the Android system to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Android media framework (libstagefright)
See all- CVE-2017-13154High
CVE-2017-13154 is a privilege escalation vulnerability in the Android media framework (libstagefright). It affects Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
- CVE-2017-0838High
CVE-2017-0838 is a privilege escalation vulnerability in the Android media framework (libstagefright). It affects Android versions 7.0, 7.1.1, and 7.1.2.
- CVE-2017-0817High
CVE-2017-0817 is an information disclosure vulnerability in the Android media framework (libstagefright). It affects Android versions from 4.4.4 to 8.0.
- CVE-2017-0813High
CVE-2017-0813 describes a denial of service vulnerability in the Android media framework (libstagefright). It affects Android versions 7.0, 7.1.1, and 7.1.2.
- CVE-2017-0809High
CVE-2017-0809 is a remote code execution vulnerability in the Android media framework (libstagefright). It affects Android versions from 4.4.4 to 8.0.
- CVE-2017-0769High
CVE-2017-0769 is a privilege escalation vulnerability in the Android media framework (libstagefright). It affects Android versions 7.0, 7.1.1, 7.1.2, and 8.0.
- CVE-2017-0765High
CVE-2017-0765 is a remote code execution vulnerability in the Android media framework (libstagefright). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, and 8.0.
- CVE-2017-0760High
CVE-2017-0760 is a remote code execution vulnerability in the Android media framework (libstagefright). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.
- CVE-2017-0759High
CVE-2017-0759 is a remote code execution vulnerability in the Android media framework (libstagefright). It affects Android versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2.
- CVE-2017-0756High
CVE-2017-0756 is a remote code execution vulnerability in the Android media framework (libstagefright). It affects Android versions from 4.4.4 to 7.1.2.
Original NVD description (English source)
An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62948670.