CVE-2017-0532: Infoleak
An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32370398. References: M-ALPS03069985.
Affected Software
Event History
Frequently Asked Questions
What access or conditions are required to exploit this issue?
Exploitation requires a local malicious application and user interaction. It also first requires compromise of a privileged process, and the CVSS vector lists high attack complexity.
What is the potential impact if exploitation succeeds?
A successful exploit could allow the malicious application to read data outside its assigned permission levels. The reported impact is limited to confidentiality; integrity and availability impacts are not listed.
How can I identify this issue in Android security tracking?
This vulnerability is tracked as Android ID A-32370398 and is associated with reference M-ALPS03069985.