PT-2017-2162
CVE-2017-0619
·
تاريخ النشر
2017-05-12
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 2.0
7.6
عاليةالمقاييسAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions Kernel-3.10
Description
The issue is related to insufficient access control in the Qualcomm pin controller driver of the Android operating system. It allows a remote attacker to execute arbitrary code in the context of the kernel by exploiting a local malicious application. This problem is considered high severity because it first requires compromising a privileged process.
Recommendations
For Android version Kernel-3.10, consider restricting access to the Qualcomm pin controller driver until a patch is available. As a temporary workaround, ensure that all privileged processes are thoroughly monitored and secured to prevent initial compromise.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾