PT-2017-12952 · Google · Android Kernel

Published 2017-12-06 · Updated 2017-12-19 · CVE-2017-13169

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android kernel

Description An information disclosure issue exists in the kernel camera server, potentially allowing unauthorized access to sensitive information.

Recommendations For Android kernel, apply the fix provided in Android ID A-37512375 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-13169

Affected Products

Android Kernel

References · 6

• https://source.android.com/security/bulletin/pixel/2017-12-01 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-13169 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-13169 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13169 · Security Note
• https://ubuntu.com/security/CVE-2017-13169 · Vendor Advisory
• https://github.com/drgroovestarr/device_huawei_angler/commit/f77930ad612a5edb6ca726a726801807a3ec0648 · Note