CVE-2017-0435: An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious applica...

Security readout for executives and security teams

CVE-2017-0435 is a high-rated Android privilege escalation issue in the Qualcomm sound driver. A local malicious app could potentially run code in the kernel, but the source says it first requires compromising a privileged process. The main business concern is legacy Android devices that missed the February 2017 Android security fixes. Exposure is most likely on older Android devices running affected Kernel-3.10 or Kernel-3.18 builds without the February 2017 Android security bulletin fixes. The provided sources do not identify specific device models or OEM patch status. Prioritize this for fleets with old or unmanaged Android devices. It is high impact because kernel code execution can compromise device integrity, but the known source context requires local conditions and does not show confirmed active exploitation. Mitigation focus: Apply Android security updates covering the February 1, 2017 bulletin or later vendor guidance.; Identify and retire Android devices that can no longer receive relevant vendor security updates.; Use MDM or inventory controls to find affected kernel versions and outdated patch levels..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.