CVE-2017-0651

4.7 mediumEPSS 1.0%

An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Low because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35644815.

Severity

CVSS 3.0

4.7 medium

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-06-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linux:linux_kernel

References

http://www.securityfocus.com/bid/98875
http://www.securitytracker.com/id/1038623
https://source.android.com/security/bulletin/2017-06-01
http://www.securityfocus.com/bid/98875
http://www.securitytracker.com/id/1038623

Check your stack JSON