CVE-2017-0663
A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process.
Published Jun 14, 2017 · updated Oct 14, 2026 · google android
A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.
Timeline
Detection, updates, and resolution for this record.
Jun 14, 2017 · NIST NVD
Detected
A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.
Oct 14, 2026 · NIST NVD
Updated
A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.
Oct 14, 2026 · OSV.dev
Fix available
libxml2 fixed in 2.9.4+dfsg1-3.1; libxml2 fixed in 2.9.4+dfsg1-3.1; libxml2 fixed in 2.9.4+dfsg1-3.1
Oct 14, 2026 · OSV.dev
Fix available
libxml2 fixed in 2.9.4+dfsg1-3.1
Oct 14, 2026 · OSV.dev
Updated
A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.
Affected
- Debian:12 libxml20 → 2.9.4+dfsg1-3.1
- Debian:13 libxml20 → 2.9.4+dfsg1-3.1
- Debian:14 libxml20 → 2.9.4+dfsg1-3.1
- cpe google/android4.4.4
- cpe google/android5.0.2
- cpe google/android5.1.1
- cpe google/android6.0
- cpe google/android6.0.1
- cpe google/android7.0
- cpe google/android7.1.1
- cpe google/android7.1.2
Sources
- CVE.orgCVE-2017-0663
Official CVE identifier
cve.org - FIRST EPSSCVE-2017-0663
30-day exploitation probability 2.3%
first.org - NIST NVDCVE-2017-0663
A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that use
nvd.nist.gov - OSV.devDEBIAN-CVE-2017-0663osv.dev