CVE-2017-0615

High

Published: 12/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability in the MediaTek power driver allows a local malicious application to execute arbitrary code within the kernel context. It first requires compromising a privileged process.

Risk Assessment

This threat can lead to privilege escalation, posing a risk of system takeover by malicious software.

Recommendation

It is recommended to monitor and secure privileged processes and update the system to minimize risk.

Other vulnerabilities in MediaTek power driver

CVE-2016-3796High
The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application.

Original NVD description (English source)

An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34259126. References: M-ALPS03150278.