VULNERABILITY INTELLIGENCE

CVE-2017-12816

CVSS score9.8 CRITICAL

EPSS probability1.50%

CISA KEVNot currently listed

Published2017-08-25

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC.

Weakness classification

CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references

vulnerability@kaspersky.com — Third Party Advisory, VDB Entry
vulnerability@kaspersky.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory