CVE-2017-0459 — Sensitive Information Exposure in INC Android
Severity
4.7MEDIUMNVD
EPSS
0.3%
top 48.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 8
Latest updateMay 17
Description
An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32644895. References: QC-CR#1091939.
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.0 | Impact: 3.6
Affected Packages3 packages
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-6873-3m5j-w4g3: An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permissi↗2022-05-17
OSV▶
CVE-2017-0459: An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permissi↗2017-03-08
📋Vendor Advisories
1Android▶
CVE-2017-0459: Android Security Bulletin 2017-03-01
CVE: CVE-2017-0459
Severity: MEDIUM
References: A-32644895
QC-CR#1091939↗2017-03-01
💬Community
7Bugzilla
▶
Bugzilla▶
CVE-2017-5410 Mozilla: Memory corruption during JavaScript garbage collection incremental sweeping (MFSA 2017-06)↗2017-03-07
Bugzilla▶
CVE-2017-5402 Mozilla: Use-after-free working with events in FontFace objects (MFSA 2017-06)↗2017-03-07
Bugzilla▶
CVE-2017-5405 Mozilla: FTP response codes can cause use of uninitialized values for ports (MFSA 2017-06)↗2017-03-07