CVE-2017-0520

High

Published: 08/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2017-0520 describes an elevation of privilege vulnerability in the Qualcomm crypto engine driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.

Risk Assessment

The risk to the organization involves the potential for arbitrary code execution within the kernel, which could lead to complete control over the device. The high risk is due to the requirement of first compromising a privileged process.

Recommendation

It is recommended to update the Android system to the latest version to mitigate the risks associated with this vulnerability. Monitoring and securing privileged processes is also crucial.

Other vulnerabilities in Sterownik silnika kryptograficznego Qualcomm

CVE-2017-0576High
An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process.

Original NVD description (English source)

An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31750232. References: QC-CR#1082636.