Skip to content
OpenAdvisories
Unscored CVE-2017-0455 EUVD-2017-0809GHSA-ff99-wrvg-57v9

An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to to execute arbitra…

Published Mar 8, 2017 · Updated Aug 5, 2024 · Assigned by google_android

Description

An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to to execute arbitrary code within the context of the bootloader. This issue is rated as High because it is a general bypass for a bootloader level defense in depth or exploit mitigation technology. Product: Android. Versions: Kernel-3.18. Android ID: A-32370952. References: QC-CR#1082755.

Affected products

VendorProductAffectedFixed
Google Android Kernel-3.18 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS android No fix yet —

References