CVE-2017-0554 - CVE House

Back to Database

Status published High CVE-2017-0554

An elevation of privilege vulnerability in the Telephony component could...

7.8 CVSS

Vulnerability Description

An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-0554

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Google Inc.

View All →

A Elevation of privilege vulnerability in the HTC bootloader. Product:...

In ixheaacd_adts_crc_start_reg of ixheaacd_adts_crc_check.c, there is a possible out of...

In impd_parametric_drc_parse_gain_set_params of impd_drc_static_payload.c there is a possible out of...

In impd_parse_parametric_drc_instructions of impd_drc_static_payload.c there is a possible out of...

In impd_parse_dwnmix_instructions of impd_drc_static_payload.c there is a possible out of...

Affected Vendor

Google Inc.

View all reports →

Affected Software

Android

Vulnerable Versions:

Android-4.4.4, Android-5.0.2, Android-5.1.1, Android-6.0, Android-6.0.1, Android-7.0, Android-7.1.1

Timeline

Official Publish: April 7th, 2017

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.