Google Android HTC Touchscreen Driver CVE-2017-0563 Privilege Escalation Vulnerability

Google Android is prone to a privilege-escalation vulnerability.

Attackers can exploit this issue to execute arbitrary code with elevated privileges within the context of the kernel.

This issue is being tracked by Android Bug ID A-32089409.

Information

Bugtraq ID: 97342
Class: Unknown
CVE: CVE-2017-0563

Remote: Yes
Local: No
Published: Apr 03 2017 12:00AM
Updated: May 04 2017 10:06AM
Credit: The vendor reported this issue.
Vulnerable: Google Nexus 9
Google Android 0

Not Vulnerable:

Exploit

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

References:

• Android Homepage (Google)
  
• PoC for Nexus 9 Cypress SAR Firmware Injection via I2C (CVE-2017-0563) (AlephSecurity)
  
• Android Security Bulletinâ??April 2017 (Android )
  

Source: www.securityfocus.com