CVE-2017-0500
HighSummary
A vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
Risk Assessment
The risk to the organization involves the potential for local device takeover, which may lead to permanent damage to the operating system requiring reflashing.
Recommendation
It is recommended to monitor devices with MediaTek components and implement appropriate security measures to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in MediaTek components (M4U driver, sound driver, touchscreen driver, GPU driver, Command Queue driver)
See all- CVE-2017-0506High
CVE-2017-0506 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0505High
CVE-2017-0505 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0504High
A vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
- CVE-2017-0503High
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
- CVE-2017-0502High
CVE-2017-0502 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0501High
CVE-2017-0501 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
Original NVD description (English source)
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28429685. References: M-ALPS02710006.