CVE-2017-0640: A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted...

Security readout for executives and security teams

CVE-2017-0640 is a High-severity Android Mediaserver issue where a specially crafted file could make an affected device hang or reboot. The business impact is availability disruption on legacy Android 6.x and 7.x devices, not confirmed data theft or code execution from the provided sources. Exposure is most likely on legacy Android devices running the listed affected versions, especially where devices process untrusted media files. Modern devices with later security patch levels are less likely to be exposed, but confirmation requires vendor patch-level validation. Treat this as a legacy mobile availability risk. Prioritize patch verification and replacement of unsupported Android 6.x and 7.x devices, especially in operational environments where device outages affect service delivery. Mitigation focus: Apply Android vendor updates covering the June 2017 security bulletin.; Upgrade or retire devices still running affected Android 6.x or 7.x builds.; Check OEM or carrier advisories for patch availability on managed devices..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.