CVE-2017-0628 is an information disclosure vulnerability in the Qualcomm camera driver affecting Android devices running Linux Kernel versions 3.10 and 3.18. A local malicious application could exploit this to access data beyond its authorized permissions. Rated as Medium severity with a CVSS score of 4.7, this vulnerability requires user interaction and a high attack complexity, as a privileged process must first be compromised. The potential impact is limited to confidentiality, with no integrity or availability concerns. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, indicating low public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:* | ||
3.18CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.