CVE-2017-13177

CVE-2017-13177 is a critical remote code execution vulnerability affecting Android versions 5.1.1 through 8.1, stemming from improper preservation of NEON registers in the libhevc library. This flaw allows an unauthenticated attacker to execute arbitrary code as a privileged process without user interaction. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.