← Back to CVEs

CVE-2017-0554

N/A

Description

An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946.

CVE Details

CVSS v3.1 ScoreN/A

Published4/7/2017

Last Modified4/20/2025

Sourcenvd

Honeypot Sightings0

Affected Products

google:android

Weaknesses (CWE)

CWE-862

References

http://www.securityfocus.com/bid/97343(security@android.com)

http://www.securitytracker.com/id/1038201(security@android.com)

https://source.android.com/security/bulletin/2017-04-01(security@android.com)

http://www.securityfocus.com/bid/97343(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1038201(af854a3a-2127-422b-91ae-364da2661108)

https://source.android.com/security/bulletin/2017-04-01(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.