VULNERABILITY INTELLIGENCE

CVE-2017-0638

CVSS score7.8 HIGH
EPSS probability1.04%
CISA KEVNot currently listed
Published2017-06-14
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High because it is a remote arbitrary code execution in an unprivileged process. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36368305.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references