CVE-2017-0414
MEDIUMAndroid 6.0 6.0.1 7.0 7.1.1 - Unauthorized Data Access via AOSP Messaging
Title source: llmDescription
An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32807795.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/96063
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1037798
Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-02-01.html
Scores
CVSS v3
5.5
EPSS
0.0011
EPSS Percentile
28.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (9)
google/android
6.0
google/android
6.0.1
google/android
7.0
google/android
7.1.0
google/android
7.1.1
Google Inc./Android
Android-6.0
Google Inc./Android
Android-6.0.1
Google Inc./Android
Android-7.0
Google Inc./Android
Android-7.1.1
Published
Feb 08, 2017
Tracked Since
Feb 18, 2026