CVE-2017-0529

MEDIUM

Google Android < 7.1.1 - Information Disclosure

Title source: rule

Description

An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-28449427. References: M-ALPS02710042.

References (4)

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1037968

[Vendor Advisory] https://source.android.com/security/bulletin/2017-03-01

[Patch, Vendor Advisory] https://source.android.com/security/bulletin/2017-03-01.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/96810

Scores

CVSS v3 5.5

EPSS 0.0013

EPSS Percentile 31.6%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Classification

CWE

CWE-200

Status published

Affected Products (2)

google/android < 7.1.1

Google Inc./Android

Timeline

Published Mar 08, 2017

Tracked Since Feb 18, 2026