CVE-2017-0554
HighSummary
A vulnerability in the Telephony component allows a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities that are not normally accessible to third-party applications.
Risk Assessment
The organization may be at risk of malicious applications gaining access to sensitive system functions, potentially leading to data security breaches.
Recommendation
It is recommended to update the Android system to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in Telephony
See all- CVE-2017-0394High
CVE-2017-0394 is a vulnerability in Telephony that allows a remote attacker to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service.
- CVE-2017-9709Critical
In Android for MSM, Firefox OS for MSM, and QRD Android, there is a privilege escalation vulnerability in telephony affecting all Android releases from CAF using the Linux kernel.
- CVE-2026-20483High
In the Telephony component, a missing permission check could allow local escalation of privilege without additional execution privileges and without user interaction.
- CVE-2026-20470Medium
In the Telephony component, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20462Medium
A memory corruption vulnerability due to a heap buffer overflow has been discovered in Telephony. This could lead to local escalation of privilege if an attacker already has System privileges. User interaction is not required for exploitation.
Original NVD description (English source)
An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946.