CVE-2017-0778: A information disclosure vulnerability in the Android media framework (n/a).

Security readout for executives and security teams

CVE-2017-0778 is an Android media framework information disclosure issue affecting Android 7.0, 7.1.1, and 7.1.2. The supplied sources do not provide CVSS, exploit details, or precise attack conditions. Treat exposed legacy Android devices as the main concern, especially where security patch levels are unknown. Exposure is most likely on devices still running Android 7.0, 7.1.1, or 7.1.2 without the relevant September 2017 Android security update. The sources do not identify specific manufacturers, device models, or application-level dependencies. Prioritize through legacy mobile risk management rather than emergency response, unless vulnerable Android 7.x devices still access sensitive systems. Unsupported or unpatched devices should be removed from trusted environments because the sources do not provide compensating technical mitigations. Mitigation focus: Apply vendor Android updates covering the September 2017 Android Security Bulletin.; Verify device patch levels include remediation for Android ID A-62133227.; Retire or isolate Android 7.0, 7.1.1, and 7.1.2 devices that cannot be patched..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.