Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2017-0408: Android apps using libgdx could run malicious code
CVE-2017-0408 · published 9 years ago
Summary
If an Android app includes the libgdx library, an attacker could send a specially crafted file that makes the app run unwanted code. This could let the attacker take actions within the app without needing special permissions. Update the libgdx library to the latest version or apply any vendor patches to protect your apps.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| android |
7.1.1 cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:* |
Original advisory text
A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as H...
A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 7.1.1. Android ID: A-32769670.
References
- http://www.securityfocus.com/bid/96092 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1037798
- https://source.android.com/security/bulletin/2017-02-01.html Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published8 Feb 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-0408 · NVD
Track software like this
Free during beta