CVE-2017-0554

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Apr 7, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-05555.5An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its peCVE-2017-05565.5An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its CVE-2017-05575.5An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its CVE-2017-05585.5An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission lCVE-2017-05595.5An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levelCVE-2017-05605.5An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previouCVE-2017-05619.8A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the conCVE-2017-05627.8An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary cCVE-2017-05637.8An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code wCVE-2017-05647.8An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code witCVE-2017-05657.0An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code CVE-2017-05667.0An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code w
CVE-2017-0554: High severity, CVSS 7.8 | Vulnix