CVE-2017-0414

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32807795.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Feb 8, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-04157.8An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04167.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04177.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04187.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04197.8An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteCVE-2017-04205.5An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that CVE-2017-04215.5An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protectiCVE-2017-04227.5A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hCVE-2017-04235.3An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issCVE-2017-04245.5An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outsideCVE-2017-04255.5An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission lCVE-2017-04265.5An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permissio
CVE-2017-0414: Medium severity, CVSS 5.5 | Vulnix