PT-2017-10584
CVE-2017-0639
·
Published
2017-06-14
·
Updated
2017-07-08
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2
Description
An information disclosure issue in the Bluetooth component could allow a local malicious application to access data outside of its permission levels, effectively bypassing operating system protections that isolate application data from other applications. This issue is considered High severity.
Recommendations
For Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, update to a version that includes the fix for Android ID A-35310991 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾