VDB

CVE-2017-0471

CVE-2017-0471 PUBLISHED

Reported by google_android · Published March 8, 2017

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33816782.

Affected products

VendorProductVersions
Google Inc.AndroidAndroid-6.0, Android-6.0.1, Android-7.0
Google Inc.Android6.0, 6.0.1, 7.0

Timeline

  • Mar 7, 2017 CVE Published
  • Apr 14, 2021 EPSS Score (30 in total, the first dated here)
  • Jun 1, 2026 Security Advisory
  • Oct 5, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2017-0471
vulnetix vdb fixes CVE-2017-0471

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2017-0471/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

  • x_refsource_CONFIRM
  • 1037968 vdb-entryx_refsource_SECTRACK
  • 96717 vdb-entryx_refsource_BID
Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›