CVE-2017-0650: An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious...

Security readout for executives and security teams

CVE-2017-0650 is a low-rated Android information disclosure issue in the Synaptics touchscreen driver. A local malicious app could access data beyond its permissions, but the source says exploitation first requires compromising a privileged process, limiting practical business urgency. Exposure is most likely on older Android devices or embedded Android builds using affected 3.10 or 3.18 kernels and Synaptics touchscreen driver code. The bundle does not identify specific OEM models, patch branches, or non-Android products. Treat this as a low-priority legacy Android hygiene issue unless affected devices handle sensitive data or cannot receive security updates. The prerequisite privileged-process compromise reduces urgency, but unsupported mobile or embedded fleets should still be tracked. Mitigation focus: Apply Android security updates covering the June 2017 bulletin where available.; Check OEM firmware advisories for affected devices and backported kernel fixes.; Retire or isolate unsupported Android devices stuck on affected kernels..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.