CVE-2017-11079

2018-01-0200:00:00

qualcomm

www.cve.org

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.3%

JSON

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninitialized heap memory can potentially be flashed due to the lack of validation of sparse image block header size.

CNA Affected

[
  {
    "product": "Android for MSM, Firefox OS for MSM, QRD Android",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All Android releases from CAF using the Linux kernel"
      }
    ]
  }
]

References

source.android.com/security/bulletin/pixel/2018-01-01