CVE-2017-11085

EPSS 0.1%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 nov 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an integer overflow leading to a buffer overflow due to improper bound checking in msm_audio_effects_virtualizer_handler, file msm-audio-effects-q6-v2.c

Productos afectados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Referencias

https://source.android.com/security/bulletin/pixel/2017-11-01