CVE-2017-0602: Infoleak

Published May 1, 2017

Updated

An information disclosure vulnerability in Bluetooth could allow a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as Moderate due to details specific to the vulnerability. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34946955.

Affected Software

30 affected components

Google Android=4.0

Google Android=4.0.1

Google Android=4.0.2

Google Android=4.0.3

Google Android=4.0.4

Google Android=4.1

Google Android=4.1.2

Google Android=4.2

Google Android=4.2.1

Google Android=4.2.2

Google Android=4.3

Google Android=4.3.1

Google Android=4.4

Google Android=4.4.1

Google Android=4.4.2

Google Android=4.4.3

Google Android=4.4.4

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android

Event History

May 1, 2017

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

May 12, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0602?

The severity of CVE-2017-0602 is rated as Moderate.

What are the affected software versions for CVE-2017-0602?

CVE-2017-0602 affects various Android versions from 4.0 to 7.1.2.

How do I fix CVE-2017-0602?

The fix for CVE-2017-0602 involves updating your Android device to a patched version provided by Google.

What threat does CVE-2017-0602 pose?

CVE-2017-0602 could allow a local malicious application to bypass protections and access isolated application data.

Who is affected by CVE-2017-0602?

Users of the Android operating system on affected versions are at risk from CVE-2017-0602.