PT-2017-10666 · Google · Android

Published 2017-11-16 · Updated 2019-10-03 · CVE-2017-0860

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 7.1.2

Description An elevation of privilege issue exists in the Android system, specifically in the inputdispatcher component. This issue may allow for unauthorized access to sensitive data or system resources.

Recommendations For Android versions 5.0.2 through 7.1.2, update to a version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2017-0860

Affected Products

Android

References · 3

• https://source.android.com/security/bulletin/pixel/2017-11-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-0860 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0860 · Security Note