PT-2017-2871

CVE-2017-0801

·

Published

2017-09-01

·

Updated

2019-10-03

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android kernel
Description The issue is related to a component of the Android operating system, specifically the MediaTek libmtkomxvdec, which has a flaw in access control. This flaw can be exploited by a remote attacker to elevate their privileges.
Recommendations For Android kernel, consider restricting access to the vulnerable component until a patch is available. As a temporary workaround, avoid using the affected libmtkomxvdec library until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾