CVE-2017-0445 Google CVE debrief

Who should care

Android OEMs, device maintainers, security teams managing Android fleets, and anyone responsible for patching devices that ship the affected kernel/driver combination.

Technical summary

The published description identifies an elevation-of-privilege flaw in the HTC touchscreen driver. The stated impact is arbitrary code execution within kernel context from a local malicious application, with additional prerequisite compromise of a privileged process. NVD records the issue under CVSS 3.0 vector AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H and maps exposure to Android up to 7.1.1 and Linux kernel 3.18. The Android Security Bulletin dated 2017-02-01 is the vendor patch reference in the supplied corpus.

Defensive priority

High for any environment running affected Android builds or OEM kernels that include the HTC touchscreen driver path referenced by the bulletin and NVD record. Prioritize patch verification over generic hardening because the impact is kernel-level code execution.

Recommended defensive actions

• Confirm whether any shipped devices include the affected HTC touchscreen driver and kernel branch referenced by the Android bulletin and NVD.
• Apply the Android Security Bulletin 2017-02-01 fixes or OEM-equivalent backports as soon as available.
• Verify device security patch level and kernel build provenance across all Android fleets.
• Treat exposed devices as higher risk where untrusted local apps can be installed, especially on older Android releases.
• Monitor for OEM-specific advisories that map the bulletin to device models and patch trains.
• If you cannot patch immediately, reduce exposure by limiting app installation sources and tightening device access controls where feasible.

Evidence notes

Primary source data comes from the NVD CVE record and the Android Security Bulletin reference included in the NVD metadata. The CVE was published on 2017-02-08. NVD lists the affected CPEs as Android up to 7.1.1 and Linux kernel 3.18, and the reference list includes the Android vendor advisory plus third-party advisories. No CISA KEV entry is present in the supplied corpus.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.