PT-2017-2162

CVE-2017-0619

·

Publicado

2017-05-12

·

Atualizado

2019-10-03

Descrição por

CVSS 2.0
7.6
Alta
MétricasAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10
Description The issue is related to insufficient access control in the Qualcomm pin controller driver of the Android operating system. It allows a remote attacker to execute arbitrary code in the context of the kernel by exploiting a local malicious application. This problem is considered high severity because it first requires compromising a privileged process.
Recommendations For Android version Kernel-3.10, consider restricting access to the Qualcomm pin controller driver until a patch is available. As a temporary workaround, ensure that all privileged processes are thoroughly monitored and secured to prevent initial compromise.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾