CVE-2017-0563
HighSummary
CVE-2017-0563 is a vulnerability in the HTC touchscreen driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.
Risk Assessment
The risk to the organization is that a local attacker could gain full control over the device, potentially leading to data loss and the need to reflash the operating system.
Recommendation
It is recommended to update the Android system to the latest version to mitigate the risks associated with this vulnerability and to monitor devices for malicious software.
Other vulnerabilities in HTC touchscreen driver
See all- CVE-2017-0447High
CVE-2017-0447 describes an elevation of privilege vulnerability in the HTC touchscreen driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
- CVE-2017-0446High
The CVE-2017-0446 vulnerability in the HTC touchscreen driver may allow a local malicious application to elevate privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
- CVE-2017-0445High
The CVE-2017-0445 vulnerability in the HTC touchscreen driver allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
Original NVD description (English source)
An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32089409.