CVE-2017-0413: An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to byp...

Security readout for executives and security teams

CVE-2017-0413 is a High-rated Android information disclosure issue in AOSP Messaging. A local malicious application could bypass Android's normal app-data isolation and access data it should not be able to read. Business risk is concentrated in older Android 6.0 through 7.1.1 devices that still run affected messaging components. Exposure is likely limited to legacy Android devices on versions 6.0 through 7.1.1, especially unmanaged or unsupported devices without the relevant Android security bulletin fixes. Modern Android fleets are unlikely to be exposed unless they retain affected legacy builds or vendor forks. Prioritize remediation if legacy Android devices are still used for business messaging, regulated data, or privileged workflows. For organizations without Android 6.0 to 7.1.1 exposure, this is primarily an asset hygiene and unsupported-device retirement issue. Mitigation focus: Confirm affected devices received the February 2017 Android security bulletin fixes or later vendor updates.; Retire or isolate Android 6.0 through 7.1.1 devices that cannot receive vendor security updates.; Restrict installation of untrusted applications on legacy Android devices..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.