Skip to content
OpenAdvisories
Unscored CVE-2017-0536 EUVD-2017-0890GHSA-5w5p-q4hm-c45p

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outsi…

Published Mar 8, 2017 · Updated Aug 5, 2024 · Assigned by google_android

Description

An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33555878.

Affected products

VendorProductAffectedFixed
Google Android Kernel-3.10, Kernel-3.18 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS android No fix yet —

References