CVE-2017-0651: An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious applicat...

Security readout for executives and security teams

CVE-2017-0651 is a low-rated Android kernel information disclosure issue in the ION subsystem. A local malicious app could access data beyond its permissions, but Google states exploitation first requires compromise of a privileged process. Business urgency is limited unless you manage older Android devices using Kernel 3.18 or unsupported vendor images. Likely exposure is older Android devices or vendor firmware based on Kernel 3.18 that did not receive the June 2017 Android security bulletin fixes or equivalent backports. Modern supported Android fleets are less likely to be exposed, but vendor patch status must be verified. Handle through legacy mobile risk management, not emergency response. Prioritize confirmation for managed Android fleets with old Kernel 3.18 firmware, especially unsupported devices, but do not treat this as actively exploited based on the supplied evidence. Mitigation focus: Check the Android June 2017 security bulletin for vendor guidance.; Update affected devices to firmware containing the relevant Android security fix.; Retire or isolate unsupported Android Kernel 3.18 devices..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.