CVE-2017-0734: A denial of service vulnerability in the Android media framework (libavc).

Security readout for executives and security teams

CVE-2017-0734 is a denial-of-service flaw in Android's media framework component libavc. An affected device may become unstable when processing problematic media. The provided sources do not show data theft, code execution, or active exploitation. Exposure is mainly legacy Android devices running the listed versions and using the vulnerable media framework. Organizations with managed mobile fleets, kiosks, scanners, or embedded Android devices should verify OS version and vendor patch status. Treat this as a legacy mobile resilience issue. It is not documented here as actively exploited, but affected devices may still create operational disruption if they remain unpatched or unsupported. Mitigation focus: Check the Android August 2017 security bulletin and OEM guidance for applicable fixes.; Apply vendor-provided Android security updates to affected devices where available.; Retire or replace devices that cannot receive relevant vendor updates..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.