CVE-2017-0440
HighSummary
CVE-2017-0440 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
Risk Assessment
The risk to the organization involves the potential execution of malicious code in the system kernel, which could lead to full control over the device. There is a high risk associated with the compromise of privileged processes.
Recommendation
It is recommended to update the Android system to the latest version to minimize the risk associated with this vulnerability. Additionally, monitoring and restricting access to applications from unknown sources is advised.
Other vulnerabilities in Sterownik Wi-Fi Qualcomm
See all- CVE-2016-10283High
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process.
- CVE-2017-0575High
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process.
- CVE-2017-0523High
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the kernel context. It requires first compromising a privileged process.
- CVE-2017-0441High
CVE-2017-0441 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
- CVE-2017-0439High
CVE-2017-0439 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
- CVE-2017-0438High
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process.
- CVE-2017-0437High
CVE-2017-0437 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
- CVE-2016-8421High
CVE-2016-8421 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
- CVE-2016-8420High
CVE-2016-8420 is a privilege escalation vulnerability in the Qualcomm Wi-Fi driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
- CVE-2016-8419High
A vulnerability in the Qualcomm Wi-Fi driver allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process.
Original NVD description (English source)
An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33252788. References: QC-CR#1095770.