Google · Android · CVE-2017-0564
**Name of the Vulnerable Software and Affected Versions**
Android versions Kernel-3.10 through Kernel-3.18
**Description**
An elevation of privilege issue in the kernel ION subsystem could allow a local malicious application to execute arbitrary code within the context of the kernel, potentially leading to a local permanent device compromise. This may require reflashing the operating system to repair the device. The issue is related to insufficient access control in the ION subsystem.
**Recommendations**
For Android versions Kernel-3.10 through Kernel-3.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.