CVE-2017-0414: An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to byp...

Security readout for executives and security teams

CVE-2017-0414 is an Android information disclosure issue in AOSP Messaging. A malicious app already installed on the device could bypass normal Android app-data isolation and access data it should not reach. Google rated the issue High. The provided sources do not show active exploitation. Exposure is most likely on legacy Android 6.x and 7.x devices that include the vulnerable AOSP Messaging component and lack the relevant February 2017 Android security fixes. Modern, supported Android devices are less likely exposed, but OEM patch status must be verified. Treat this as a legacy Android hygiene risk with High confidentiality impact. It is not presented as actively exploited, but affected devices are old and likely unsupported. Prioritize inventory, patch confirmation, and retirement of unpatchable devices used for business or sensitive communications. Mitigation focus: Apply vendor Android security updates covering the February 2017 bulletin or later.; Retire or isolate unsupported Android 6.x and 7.x devices.; Restrict installation of untrusted applications on managed devices..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.