CVE-2017-0663: A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to...

Security readout for executives and security teams

CVE-2017-0663 is a high-impact libxml2 flaw in Android. A maliciously crafted file could let code run inside an unprivileged process. The main business risk is legacy Android devices or embedded builds that still parse untrusted files with vulnerable platform libraries. Exposure is most likely on unpatched Android 4.4.4 to 7.1.2 devices, especially where apps or services parse attacker-supplied XML or document content using libxml2. Treat as high priority for legacy Android fleets and embedded Android products. Current supported devices are less likely to be exposed if security updates were applied, but unsupported devices may need replacement or isolation. Mitigation focus: Apply the Android 2017-06-01 security bulletin updates where available.; Update libxml2 packages per Debian or Gentoo vendor advisories where applicable.; Retire or isolate unsupported Android versions that cannot receive security updates..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.