CVE-2017-11027

2017-11-0100:00:00

qualcomm

www.cve.org

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not validated for being smaller than minimum header size causing unintialized data access vulnerability.

CNA Affected

[
  {
    "product": "Android for MSM, Firefox OS for MSM, QRD Android",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All Android releases from CAF using the Linux kernel"
      }
    ]
  }
]

References

source.android.com/security/bulletin/pixel/2017-11-01