VULNERABILITY INTELLIGENCE

CVE-2017-0663

CVSS score7.8 HIGH
EPSS probability2.32%
CISA KEVNot currently listed
Published2017-06-14
Last modified2026-10-14
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references