CVE-2017-0626

MEDIUM

Android Kernel <3.18 - Info Disclosure

Title source: llm

Description

An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35393124. References: QC-CR#1088050.

References (2)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/98202

[Patch, Vendor Advisory] https://source.android.com/security/bulletin/2017-05-01

Scores

CVSS v3 5.5

EPSS 0.0020

EPSS Percentile 41.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (4)

linux/linux_kernel

Google Inc./Android < Kernel-3.10

Google Inc./Android < Kernel-3.18

Published May 12, 2017

Tracked Since Feb 18, 2026