CVE-2017-0451

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 through Kernel-3.18

Description An information disclosure issue in the Qualcomm sound driver could allow a local malicious application to access data outside of its permission levels. This issue requires compromising a privileged process.

Recommendations For Android versions Kernel-3.10 through Kernel-3.18, consider restricting access to sensitive data until a patch is available. As a temporary workaround, limiting the privileges of the Qualcomm sound driver may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.