CVE-2017-0495

CVE-2017-0495 describes an information disclosure vulnerability in Android's Mediaserver component, affecting versions 6.0, 6.0.1, 7.0, and 7.1.1. A local malicious application could exploit this flaw to access sensitive data beyond its authorized permissions. Rated as Medium severity with a CVSS score of 5.5, the vulnerability requires user interaction (UI:R) for a local attacker (AV:L) to achieve high confidentiality impact (C:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.