CVE-2017-0451: An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious applica...

Security readout for executives and security teams

CVE-2017-0451 is an Android Qualcomm sound driver information disclosure issue. A local malicious app could access data beyond its normal permissions, but the source notes it first requires compromise of a privileged process. That lowers urgency compared with remotely exploitable mobile bugs, but legacy Android fleets should still confirm patch status. Exposure is most likely on older Android devices using Qualcomm sound driver code on kernel 3.10 or 3.18 that did not receive the February 2017 Android security bulletin fixes or equivalent OEM backports. Treat this as a moderate legacy mobile risk. It is not evidenced as actively exploited in the provided sources, but unpatched older Android devices may expose sensitive data if another privileged compromise occurs. Mitigation focus: Apply Android security updates covering the 2017-02-01 bulletin where available.; Check OEM or carrier firmware advisories for Qualcomm backports.; Prioritize unsupported Android devices for replacement or isolation..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.