CVE-2017-5217

CVE-2017-5217 affects certain Samsung Android devices (K(KK 4.4), L 5.x, M 6.0). A zero-permission app can trigger an active install session for an embedded APK, which is written to /data/app. Samsung’s modified PackagePrefetcher may parse these APKs during boot, causing an uncaught OutOfMemoryEr...

CVE-2017-5217

Installing a zero-permission Android application on certain Samsung Android devices with KK4.4, L5.0/5.1, and M6.0 software can continually crash the systemserver process in the Android OS. The zero-permission app will create an active install session for a separate app that it has embedded withi...