Security readout for executives and security teams
CVE-2017-0788 is an Android kernel elevation-of-privilege issue in the Broadcom Wi-Fi driver. The provided sources do not include severity, CVSS, exploitation evidence, or attack prerequisites. Business urgency depends on whether managed Android devices use affected Broadcom Wi-Fi driver builds and lack the relevant Android/OEM security update. Exposure is most likely limited to Android devices using affected Broadcom Wi-Fi driver components in the Android kernel. The bundle does not identify specific device models, Android releases, or OEM firmware branches, so exposure requires asset and patch-level verification. Handle this as a targeted Android fleet hygiene item, not a confirmed active-exploitation emergency. Priority rises for organizations with legacy Android devices, unmanaged mobile endpoints, or unsupported OEM firmware. Mitigation focus: Check Android Security Bulletin 2017-09-01 and OEM advisories for the applicable fix.; Prioritize updating Android devices with Broadcom Wi-Fi components and outdated kernel patch levels.; Use MDM controls to enforce minimum Android security patch levels where available..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
Privilege behavior lookup
The CVE wording references privilege impact, so privilege escalation and authorization behavior review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2017-0788 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://source.android.com/security/bulletin/2017-09-01CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.