CVE-2017-0740: High severity Google Android vulnerability
Published Aug 7, 2017
·Updated
A remote code execution vulnerability in the Broadcom networking driver. Product: Android. Versions: Android kernel. Android ID: A-37168488. References: B-RB#116402.
Affected Software
2 affected components
Google Android<=7.1.2
Google Android
Event History
Aug 7, 2017
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Aug 9, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates local attack access, no privileges required, and user interaction required. Successful exploitation can result in high impact to confidentiality, integrity, and availability.
2
Which component should be investigated during triage?
The affected component is the Broadcom networking driver in the Android kernel. The available data identifies Google Android as the software and provides Android issue ID A-37168488 and Broadcom reference B-RB#116402 for tracking.