Google Android Qualcomm Adsprpc Driver CVE-2017-0465 Privilege Escalation Vulnerability

Bugtraq ID:	98184
Class:	Unknown
CVE:	CVE-2017-0465
Remote:	Yes
Local:	No
Published:	May 01 2017 12:00AM
Updated:	May 23 2017 04:23PM
Credit:	Yonggang Guo (@guoygang) of IceSword Lab, Qihoo 360 Technology Co. Ltd
Vulnerable:	Google Pixel XL 0 Google Pixel 0 Google Nexus 6P Google Nexus 5X Google Android One 0
Not Vulnerable:

Google Android Qualcomm Adsprpc Driver CVE-2017-0465 Privilege Escalation Vulnerability

Google Android is prone to a privilege escalation vulnerability.

Attackers can exploit this issue to execute arbitrary code with elevated privileges within the context of the kernel.

This issue is being tracked by Android Bug ID-A-34112914.

Google Android Qualcomm Adsprpc Driver CVE-2017-0465 Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Qualcomm Adsprpc Driver CVE-2017-0465 Privilege Escalation Vulnerability

References:

• Android Homepage (Google)
  
• Android Security Bulletin�??May 2017 (Android)
  
• msm: ADSPRPC: Check for buffer overflow condition (Codeaurora)