CVE-2017-18074

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650…

published April 11, 2018

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

⚠️ A quirky little bug in Android could crash your device while playing certain .wma files. Who knew a modified media header could cause all this ruckus? Think of it like a restaurant serving a dish with a recipe that calls for bizarre ingredients—one wrong spice can spoil the whole meal! Here, the non-standard bytes per second parameter is that sneaky ingredient that throws everything off balance. When a user plays a specially crafted .wma file, it can trigger a system assert, potentially crashing the media player or even the device itself. While it might not lead to data loss or remote access, it can definitely ruin your jam session!

Put simply

Think of it like a restaurant serving a dish with a recipe that calls for bizarre ingredients—one wrong spice can spoil the whole meal! Here, the non-standard bytes per second parameter is that sneaky ingredient that throws everything off balance. This vulnerability arises from the media player mishandling non-standard configurations in .wma file headers, leading to an assert failure in Android devices utilizing Qualcomm Snapdragon chipsets.

What to do

When a user plays a specially crafted .wma file, it can trigger a system assert, potentially crashing the media player or even the device itself. While it might not lead to data loss or remote access, it can definitely ruin your jam session! To mitigate this vulnerability, ensure your Android device is updated to the latest security patch level from April 5, 2018, or later. Regularly check for system updates and apply them promptly to enhance your device's security. You've got this! Stay updated, and your device will be rocking and rolling safely! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01185 · 67.6th percentile
Published
2018-04-11T15:00Z
EPSS history
Timeline
  • 11 APR 15:00Z
    In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650…
    cvelistv5