PT-2017-1426

CVE-2017-0494

·

Published

2017-03-08

·

Updated

2017-07-17

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1
Description The issue is related to an information disclosure problem in the AOSP Messaging component of the Android operating system, which is caused by a lack of protection for internal data. This could allow a remote attacker, using a specially crafted file, to access data beyond their permission levels. The problem is considered moderate because it could be used to access sensitive data without proper authorization.
Recommendations For Android versions 6.0 through 7.1.1, update to a version that includes the fix for this issue to prevent potential data access beyond permission levels.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾