CVE-2017-0648 is an elevation of privilege vulnerability in the Android kernel's FIQ debugger, specifically affecting Kernel-3.10. A local malicious application could exploit this to execute arbitrary code within the kernel context. Rated as High severity (CVSS 7.8), it carries the risk of a permanent device compromise requiring operating system reflash. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, though it has seen minimal community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.