VULNERABILITY INTELLIGENCE

CVE-2017-0412

CVSS score7.8 HIGH
EPSS probability2.54%
CISA KEVNot currently listed
Published2017-02-08
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33039926.

Weakness classification

  • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

Primary references