CVE-2017-11007

EPSS 0.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

05 Dec 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of stack corruption due to buffer overflow of Partition name while converting ascii string to unicode string in function HandleMetaImgFlash.

Affected products

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

References

https://source.android.com/security/bulletin/2017-12-01 http://www.securityfocus.com/bid/102073