PT-2017-2271 · Qualcomm+1 · Qualcomm Camera Driver+1
Publicado
2017-03-08
·
Atualizado
2017-07-17
·
CVE-2016-8417
CVSS v2.0
7.6
Alta
| Vetor | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android versions Kernel-3.10 through Kernel-3.18
Description
The issue is related to an elevation of privilege vulnerability in the Qualcomm camera driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This requires compromising a privileged process and is mitigated by current platform configurations. The vulnerability is related to insufficient access control and could potentially allow a remote attacker to execute arbitrary code.
Recommendations
For Android versions Kernel-3.10 through Kernel-3.18, consider restricting access to privileged processes to minimize the risk of exploitation. As a temporary workaround, review and adjust current platform configurations to mitigate the issue until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Android
Qualcomm Camera Driver