CVE-2017-0504
HighSummary
A vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
Risk Assessment
The risk to the organization is that a local attacker could gain full control over the device, potentially leading to data loss and the need to reflash the operating system.
Recommendation
It is recommended to update devices to the latest software version and monitor installed applications for potential threats.
Other vulnerabilities in MediaTek components (M4U driver, sound driver, touchscreen driver, GPU driver, Command Queue driver)
See all- CVE-2017-0506High
CVE-2017-0506 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0505High
CVE-2017-0505 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0503High
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
- CVE-2017-0502High
CVE-2017-0502 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0501High
CVE-2017-0501 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0500High
A vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
Original NVD description (English source)
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30074628. References: M-ALPS02829371.