CVE-2017-0506
HighSummary
CVE-2017-0506 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
Risk Assessment
This vulnerability is rated as Critical due to the potential for local permanent device compromise, which may require reflashing the operating system to repair the device.
Recommendation
It is recommended to update the operating system and monitor applications installed on devices with MediaTek components to minimize risk.
Other vulnerabilities in MediaTek components (M4U driver, sound driver, touchscreen driver, GPU driver, Command Queue driver)
See all- CVE-2017-0505High
CVE-2017-0505 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0504High
A vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
- CVE-2017-0503High
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
- CVE-2017-0502High
CVE-2017-0502 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0501High
CVE-2017-0501 describes an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. A local malicious application could execute arbitrary code within the context of the kernel.
- CVE-2017-0500High
A vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, allows a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise.
Original NVD description (English source)
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32276718. References: M-ALPS03006904.