CVE-2017-0784

HIGH

Android <7.1.2 - Privilege Escalation

Title source: llm

Description

A elevation of privilege vulnerability in the Android system (nfc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37287958.

Exploits (1)

github WORKING POC 5 stars

by heeeeen · javapoc

https://github.com/heeeeen/CVE-PoC/tree/master/CVE-2017-0784

View Code ZIP pw:eip

References (2)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/100671

[Patch, Vendor Advisory] https://source.android.com/security/bulletin/2017-09-01

Scores

CVSS v3 8.8

EPSS 0.0006

EPSS Percentile 18.6%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-732

Status draft

Affected Products (12)

google/android

Timeline

Published Sep 08, 2017

Tracked Since Feb 18, 2026