PT-2017-9658
CVE-2016-8477
·
Published
2017-03-08
·
Updated
2017-07-17
Description by
CVSS 3.1
4.7
MediumMetricsAV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Android versions Kernel-3.10, Kernel-3.18
Description
An information disclosure issue in the Qualcomm camera driver could allow a local malicious application to access data outside of its permission levels. This issue requires compromising a privileged process.
Recommendations
For Android versions Kernel-3.10, Kernel-3.18, consider restricting access to the Qualcomm camera driver until a patch is available. As a temporary workaround, review and limit applications with privileged process access to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾