CVE-2017-0645: Infoleak

Published Jun 5, 2017

Updated

An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it is a local bypass of user interaction requirements. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35385327.

Affected Software

5 affected components

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.1

Google Android=7.1.2

Google Android

Event History

Jun 5, 2017

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityWeaknessAffected Software

Jun 14, 2017

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

Which Android versions are affected?

The affected versions listed are Android 6.0.1, 7.0, 7.1.1, and 7.1.2.

What does an attacker need to exploit this issue?

Exploitation requires a malicious application to run locally on the device and user interaction. No privileges are required by the CVSS vector.

What is the likely impact of successful exploitation?

A malicious local application could access data outside its assigned permission levels. The listed impact is high confidentiality impact, with no integrity or availability impact.

CVE-2017-0645: Infoleak

Affected Software

Event History

Frequently Asked Questions

Which Android versions are affected?

What does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which Android versions are affected?

What does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?