CVE-2017-0625
MEDIUMAndroid - Info Disclosure
Title source: llmDescription
An information disclosure vulnerability in the MediaTek command queue driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-35142799. References: M-ALPS03161531.
Scores
CVSS v3
5.5
EPSS
0.0007
EPSS Percentile
21.8%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (2)
google/android
< 7.1.2
Google Inc./Android
Published
May 12, 2017
Tracked Since
Feb 18, 2026