CVE-2017-0548

MEDIUM

Google Android - Memory Corruption

Title source: rule

Description

A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33251605.

Exploits (1)

github SUSPICIOUS 8 stars

by codecat007 · cpoc

https://github.com/codecat007/cvehub/tree/main/android/CVE-2017-0548

View Code ZIP pw:eip

References (3)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/97398

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1038201

[Vendor Advisory] https://source.android.com/security/bulletin/2017-04-01

Scores

CVSS v3 5.5

EPSS 0.0030

EPSS Percentile 53.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-119

Status published

Products (5)

google/android 7.0

google/android 7.1.0

google/android 7.1.1

Google Inc./Android Android-7.0

Google Inc./Android Android-7.1.1

Published Apr 07, 2017

Tracked Since Feb 18, 2026