medium5.5
CVE-2017-0529
An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels.
Impact
An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-28449427. References: M-ALPS02710042.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | through 7.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96810
- http://www.securitytracker.com/id/1037968
- https://source.android.com/security/bulletin/2017-03-01
- https://source.android.com/security/bulletin/2017-03-01.html
- http://www.securityfocus.com/bid/96810
- http://www.securitytracker.com/id/1037968
- https://source.android.com/security/bulletin/2017-03-01