PT-2017-1399

CVE-2017-0526

·

Published

2017-03-08

·

Updated

2019-10-03

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10
Description The issue is related to insufficient access control in the HTC Sensor Hub Driver of the Android operating system. It may allow a remote attacker to elevate privileges and execute arbitrary code within the context of the kernel using a local malicious application. This issue is considered high severity because it first requires compromising a privileged process.
Recommendations For Android version Kernel-3.10, consider restricting access to the HTC Sensor Hub Driver to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾