Candidate: CVE-2017-0642 PublicDate: 2017-06-14 13:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0642 https://android.googlesource.com/platform/external/libhevc/+/913d9e8d93d6b81bb8eac3fc2c1426651f5b259d https://source.android.com/security/bulletin/2017-06-01 Description: A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34819017. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [5.5 MEDIUM] Patches_android: upstream_android: needs-triage precise/esm_android: DNE trusty_android: ignored (abandoned) trusty/esm_android: DNE (trusty was ignored [abandoned]) vivid/stable-phone-overlay_android: ignored (reached end-of-life) vivid/ubuntu-core_android: DNE xenial_android: ignored (abandoned) yakkety_android: ignored (reached end-of-life) zesty_android: ignored (reached end-of-life) artful_android: DNE bionic_android: DNE devel_android: DNE