CVE-2017-0569

highpriority · track · 41EPSS 0.077 · 95 %ileexploit · functionalEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · functional

Likely / severe?

7.69% (95th) EPSS

CVSS 7.6 · high

Is it mine?

5 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34198729. References: B-RB#110666.

cvss

Technical severity, 0–10. One row per scoring source.

7.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–7.6

v2.07.6highAV:N/AC:H/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 4.9 · impact 10

v3.07highCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1 · impact 5.9

v2.07.6highAV:N/AC:H/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v3.06.6mediumCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-131USprimaryCWE-264US

exploits (1)

Public proof-of-concept and weaponised exploit code.

EDB-41808Broadcom Wi-Fi SoC - 'dhd_handle_swc_evt' Heap Overflowfunctional · exploit_db

affected products (5)

Products and version ranges known to be affected.

Google Inc. Android≤ Kernel-3.10enisa_euvdEU
Google Inc. Android≤ Kernel-3.18enisa_euvdEU
Google Inc Android≤ .fstec_bduRU
linux linux kernel= 3.10nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel= 3.18nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2017-04-07modified 2026-06-17

related (350)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2020-17087US	high7.2OT critical	5.43% (93rd)	KEV	2020-11-11
Windows Kernel Local Elevation of Privilege Vulnerability
CVE-2015-0235US	high10.0	94.6% (100th)	Exploit	2015-01-28
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code…
CVE-2011-4862US	high10.0	95.1% (100th)	Exploit	2011-12-25
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU…
CVE-2023-36824US	high8.8	77.4% (100th)	—	2023-07-11
Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap o…
CVE-2005-3120US	critical9.8	23.3% (98th)	Exploit	2005-10-17
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian chara…

+345 more

references (12)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan