CVE-2017-0546
HighSummary
A vulnerability in SurfaceFlinger allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
Risk Assessment
The risk to the organization is the potential for malicious software to gain access to critical system functions, which could lead to serious security breaches.
Recommendation
It is recommended to update the Android system to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in SurfaceFlinger
See all- CVE-2026-20511Unknown
In SurfaceFlinger, there is a possible memory corruption due to use-after-free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed.
- CVE-2017-0405High
A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process.
Original NVD description (English source)
An elevation of privilege vulnerability in SurfaceFlinger could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32628763.