PT-2018-5534

CVE-2017-13247

·

Published

2018-02-12

·

Updated

2019-10-03

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Android kernel
Description: The issue is related to a missing permission check in the Pixel 2 bootloader, which can bypass the carrier bootloader lock. This could lead to local elevation of privileges, with user execution privileges needed for exploitation. User interaction is not required for exploitation.
Recommendations: For Android kernel, consider applying a patch or fix that addresses the missing permission check in the Pixel 2 bootloader to prevent local elevation of privileges.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾