PT-2017-1886
CVE-2017-0568
·
Published
2017-04-07
·
Updated
2019-10-03
Description by
CVSS 2.0
7.6
HighMetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions Kernel-3.10, Kernel-3.18
Description
The issue is related to an elevation of privilege vulnerability in the Broadcom Wi-Fi driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This vulnerability is rated as High because it first requires compromising a privileged process. The vulnerability is associated with insufficient access control in the Wi-Fi driver, potentially allowing a remote attacker to execute arbitrary code in the kernel context using a special application.
Recommendations
For Android versions Kernel-3.10, Kernel-3.18, consider disabling the Wi-Fi driver or restricting its use until a patch is available.
As a temporary workaround, restrict access to the kernel to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾