CVE-2017-0775: A denial of service vulnerability in the Android media framework (libstagefright).

Security readout for executives and security teams

CVE-2017-0775 is an Android media framework denial-of-service issue in libstagefright. The known business impact is device or media-service disruption, not confirmed data theft or remote code execution. Exposure is mainly legacy Android devices that never received the September 2017 Android security update or equivalent vendor fixes. Organizations are exposed if they still operate Android devices on the listed versions without the relevant September 2017 Android security bulletin fixes or equivalent OEM updates. Unsupported legacy phones, tablets, kiosks, scanners, or embedded Android deployments are the most plausible residual exposure. Treat this as a legacy Android hygiene issue with moderate urgency. It is not sourced as actively exploited, but unpatched media-framework bugs can disrupt operational devices. Focus on finding unsupported Android assets and removing them from critical workflows. Mitigation focus: Apply Android security updates covering the 2017-09-01 bulletin or later OEM builds.; Retire or replace devices that cannot receive vendor security updates.; Prioritize managed, internet-facing, kiosk, and operational Android devices for remediation..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.