CVE-2017-0421: An information disclosure vulnerability in the Framework APIs could enable a local malicious application to...

Security readout for executives and security teams

CVE-2017-0421 is an Android Framework APIs information disclosure flaw. A malicious app already on the device could bypass normal Android app-data isolation and access data it should not see. Google rated the issue High, but the provided sources do not show active exploitation. Exposure is most relevant to legacy Android devices running the listed versions, especially if they can install untrusted applications. Modern supported Android builds are less likely to be exposed, but validation depends on device firmware and security patch status. Treat this as a legacy mobile-device risk. Prioritize remediation where affected Android devices handle sensitive corporate data or permit unmanaged app installation. The main business concern is cross-application data exposure from a malicious local app. Mitigation focus: Review Google's February 2017 Android Security Bulletin for vendor fix applicability.; Upgrade affected devices to supported Android builds with applicable security updates.; Check OEM or carrier advisories for device-specific firmware availability..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.