What is the severity of CVE-2017-0626?

CVE-2017-0626 is rated as High due to the potential for sensitive data exposure without user permission.

How do I fix CVE-2017-0626?

To fix CVE-2017-0626, ensure that your Android device is updated with the security patches provided by the manufacturer.

Which Android versions are affected by CVE-2017-0626?

CVE-2017-0626 affects certain versions of Android that utilize the Qualcomm crypto engine driver.

Can CVE-2017-0626 be exploited remotely?

CVE-2017-0626 requires local access to the device for exploitation, as it involves a local malicious application.

What kind of data is at risk due to CVE-2017-0626?

CVE-2017-0626 allows access to sensitive data that should be restricted by application permissions.

Vulnerability/
CVE-2017-0626

medium

5.5

CWE

200

1/5/2017

12/5/2017

26/8/2024

CVE-2017-0626: Infoleak

First published: Mon May 01 2017(Updated: )

An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-35393124. References: QC-CR#1088050.

Credit: security@android.com

Affected Software	Affected Version	How to fix
Linux Kernel	=3.10
Linux Kernel	=3.18
Android

Remedy

https://source.android.com/security/bulletin/2017-05-01

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-0626?
CVE-2017-0626 is rated as High due to the potential for sensitive data exposure without user permission.
How do I fix CVE-2017-0626?
To fix CVE-2017-0626, ensure that your Android device is updated with the security patches provided by the manufacturer.
Which Android versions are affected by CVE-2017-0626?
CVE-2017-0626 affects certain versions of Android that utilize the Qualcomm crypto engine driver.
Can CVE-2017-0626 be exploited remotely?
CVE-2017-0626 requires local access to the device for exploitation, as it involves a local malicious application.
What kind of data is at risk due to CVE-2017-0626?
CVE-2017-0626 allows access to sensitive data that should be restricted by application permissions.

agent/first-publish-date
agent/type
agent/references
agent/weakness
agent/severity
agent/remedy
agent/author
agent/description
collector/mitre-cve
source/MITRE
agent/event
agent/last-modified-date
agent/source
collector/nvd-index
agent/software-canonical-lookup-request
agent/softwarecombine
agent/tags
collector/android-source
source/Android
agent/software-canonical-lookup
vendor/linux
canonical/linux kernel
version/linux kernel/3.10
version/linux kernel/3.18
vendor/google
canonical/android

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.