Description
An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-33745862. References: QC-CR#1035099.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/96805
Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-03-01
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1037968
Patch x_refsource_confirm
https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=6997dcb7ade1315474855821e64782205cb0b53a
Patch, Vendor Advisory
https://source.android.com/security/bulletin/2017-03-01.html
Scores
CVSS v3
5.5
EPSS
0.0028
EPSS Percentile
51.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (2)
Google Inc./Android
Kernel-3.10
linux/linux_kernel
3.10
Published
Mar 08, 2017
Tracked Since
Feb 18, 2026