VYPR
← All advisories
High severity7.8NVD Advisory· Published Mar 8, 2017· Updated Jun 17, 2026

CVE-2017-0476

CVE-2017-0476

Description

A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of an unprivileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33388925.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Google/Android7 versions
    cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*
    • (no CPE)range: 6.0, 6.0.1, 7.0, 7.1.1
    • (no CPE)range: Android-6.0
  • Google/AOSP Messagingllm-create
    Range: 6.0, 6.0.1, 7.0, 7.1.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.