CVE-2017-0763: A remote code execution vulnerability in the Android media framework (libhevc).

Security readout for executives and security teams

CVE-2017-0763 is a remote code execution flaw in Android's media framework component libhevc. Affected Android versions range from 5.0.2 through 8.0. Business urgency depends on whether legacy Android devices remain in use without the September 2017 Android security update or later vendor fixes. Exposure is most likely on unmanaged, unsupported, or long-lived Android devices running the listed versions without security updates from September 2017 or later. Modern devices with current patch levels are less likely exposed, but vendor backport status should be verified. Prioritize discovery and remediation for legacy Android fleets. This is not presented as currently exploited in the supplied sources, but remote code execution in a media component creates material risk when affected devices remain unpatched. Mitigation focus: Apply Android vendor updates that include the September 2017 security bulletin or later fixes.; Verify OEM firmware includes the fix for Android ID A-62534693.; Retire or isolate devices that cannot receive relevant security updates..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.