CVE-2017-0561: google inc. android Out-of-bounds Write
Vulnerability summary
CVE-2017-0561 is a high (CVSS 10.0) Out-of-bounds Write vulnerability in google inc. android. EPSS estimates a 29.82% chance of exploitation in the next 30 days, higher than 98.2% of scored vulnerabilities. 2 public exploits are recorded.
Weaponized exploit (exploit-database, 04-04-2017)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 07-04-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.
CVSS metrics
3 scores · 2 sources · 2 versions- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
29.82%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
No change 0.00 pp
From 29.82% on 05-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundBroadcom Wi-Fi SoC - Heap Overflow 'wlc_tdls_cal_mic_chk' Due to Large RSN IE in TDLS Setup Confirm Frame
Maturity: poc
Broadcom Wi-Fi SoC - TDLS Teardown Request Remote Heap Overflow
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Debian1 product
- firmware-nonfree< 20180518-1
Google inc.1 product
- androidKernel-3.10 | Kernel-3.18
Linux1 product
- linux_kernel3.10 | 3.18
3 vendors · 3 products
