CVE-2017-0447
HighSummary
CVE-2017-0447 describes an elevation of privilege vulnerability in the HTC touchscreen driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
Risk Assessment
The risk to the organization involves the potential for arbitrary code execution in the system kernel, which could lead to full control of the device by an attacker.
Recommendation
It is recommended to update the Android system to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in HTC touchscreen driver
See all- CVE-2017-0563High
CVE-2017-0563 is a vulnerability in the HTC touchscreen driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
- CVE-2017-0446High
The CVE-2017-0446 vulnerability in the HTC touchscreen driver may allow a local malicious application to elevate privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
- CVE-2017-0445High
The CVE-2017-0445 vulnerability in the HTC touchscreen driver allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
Original NVD description (English source)
An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32919560.