CVE catalog
CVE-2017-0424
UBUNTU-
An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it is a general bypass for a user level defense in depth or exploit mitigation technology in a privileged process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32322450.
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.80% · Oct 27, 2026
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Ubuntu16.04 | android | 20150818-1500-0ubuntu2 | Affected | [UBUNTU-CVE-2017-0424] |
| Ubuntu16.04 | android | 20150818-1500-0ubuntu3 | Affected | [UBUNTU-CVE-2017-0424] |
| Ubuntu16.04 | android | 20160307-0742-0ubuntu3 | Affected | [UBUNTU-CVE-2017-0424] |
| Ubuntu16.04 | android | 20160330-0939-0ubuntu1 | Affected | [UBUNTU-CVE-2017-0424] |
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Ubuntu16.04 | android | 20150818-1500-0ubuntu2 | Affected | [UBUNTU-CVE-2017-0424] |
| Ubuntu16.04 | android | 20150818-1500-0ubuntu3 | Affected | [UBUNTU-CVE-2017-0424] |
| Ubuntu16.04 | android | 20160307-0742-0ubuntu3 | Affected | [UBUNTU-CVE-2017-0424] |
| Ubuntu16.04 | android | 20160330-0939-0ubuntu1 | Affected | [UBUNTU-CVE-2017-0424] |
Original provider fields
{
"package_releases": [],
"fixed_versions": [],
"distribution_packages": [
{
"name": "android",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"release": "16.04",
"versions": [
"20150818-1500-0ubuntu2",
"20150818-1500-0ubuntu3",
"20160307-0742-0ubuntu3",
"20160330-0939-0ubuntu1"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2017-0424",
"fixed_version": "",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2017-0424",
"provider_updated_at": "2025-10-24T04:46:02Z"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
Observed: