Medium severity5.5NVD Advisory· Published Apr 7, 2017· Updated May 13, 2026
CVE-2017-0557
CVE-2017-0557
Description
An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-34093073.
Affected products
6cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*
- (no CPE)range: Android-6.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- android.googlesource.com/platform/external/libmpeg2/+/227c1f829127405e21dab1664393050c652ef71envdIssue TrackingPatchThird Party Advisory
- www.securityfocus.com/bid/97332nvdThird Party AdvisoryVDB Entry
- source.android.com/security/bulletin/2017-04-01nvdVendor Advisory
- www.securitytracker.com/id/1038201nvd
News mentions
0No linked articles in our index yet.