CVE-2017-0576
HighSummary
An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process.
Risk Assessment
The risk to the organization involves the potential for arbitrary code execution in the kernel, which could lead to full control over the device. The high risk is due to the requirement of first compromising a privileged process.
Recommendation
It is recommended to update the Android system to the latest version to mitigate the risk associated with this vulnerability. Additionally, monitoring and restricting access to privileged applications is advised.
Other vulnerabilities in Sterownik silnika kryptograficznego Qualcomm
Original NVD description (English source)
An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33544431. References: QC-CR#1103089.