Skip to content
OpenAdvisories
Unscored CVE-2017-0535 EUVD-2017-0889GHSA-2fvx-fjcj-g5x8

An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of …

Published Mar 8, 2017 · Updated Aug 5, 2024 · Assigned by google_android

Description

An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33547247.

Affected products

VendorProductAffectedFixed
Google Android Kernel-3.10 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS android No fix yet —

References