CVE-2017-0529

MEDIUM

Android < 7.1.1 - Information Disclosure in MediaTek Driver

Title source: llm
STIX 2.1

Description

An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-28449427. References: M-ALPS02710042.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-03-01
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037968
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/96810

Scores

CVSS v3 5.5
EPSS 0.0013
EPSS Percentile 31.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
google/android < 7.1.1
Google Inc./Android
Published Mar 08, 2017
Tracked Since Feb 18, 2026