PT-2018-5534
CVE-2017-13247
·
Published
2018-02-12
·
Updated
2019-10-03
Description by
CVSS 2.0
4.6
MediumMetricsAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Android kernel
Description:
The issue is related to a missing permission check in the Pixel 2 bootloader, which can bypass the carrier bootloader lock. This could lead to local elevation of privileges, with user execution privileges needed for exploitation. User interaction is not required for exploitation.
Recommendations:
For Android kernel, consider applying a patch or fix that addresses the missing permission check in the Pixel 2 bootloader to prevent local elevation of privileges.
Found an issue in the description? Have something to add? Feel free to write us 👾