CVE-2017-0420

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32615212.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Feb 8, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-04215.5An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protectiCVE-2017-04227.5A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hCVE-2017-04235.3An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issCVE-2017-04245.5An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outsideCVE-2017-04255.5An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission lCVE-2017-04265.5An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permissioCVE-2017-04277.8An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code withiCVE-2017-04287.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinCVE-2017-04297.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinCVE-2017-04307.8An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2017-04317.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3257CVE-2017-04327.0An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within t
CVE-2017-0420: Medium severity, CVSS 5.5 | Vulnix