CVE-2017-0569

This is a weakness in the Wi‑Fi software inside some Android/Linux kernels. In the worst case, a malicious app can trick a user into interacting with it, and then use that trick to run code with extremely high “kernel” power—like getting a master key to the device.

This matters if you use or manage Android devices with Broadcom Wi‑Fi drivers and you have not installed the security updates that address this issue. It’s not a simple “anyone on the internet” problem; it needs a local malicious app and user interaction (a trick to get the user to do something). Reachability is high for default configurations (the Wi‑Fi driver exposure is present), but the attack still requires that the device is running an unpatched vulnerable build and that the attacker can get a malicious app executed with the needed interaction.

This is AMBER because a local attacker can exploit it without authentication, and a public exploit exists. Since it relies on user interaction, it’s less likely than purely remote bugs, but it still warrants timely patching for affected Android devices.