CVE-2017-11046: High severity android vulnerability

Published Oct 10, 2017

Updated

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur.

Affected Software

1 affected component

Google Android=8.0

Event History

Oct 10, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates local access and low privileges are required. No user interaction is required.

What impact could successful exploitation have?

The issue can cause a kernel out-of-bounds write through an audio driver ioctl handler. The CVSS vector rates confidentiality, integrity, and availability impact as high.

Which environments are identified as affected?

The affected environments listed are Android for MSM, Firefox OS for MSM, QRD Android, and Android releases from CAF using the Linux kernel.

CVE-2017-11046: High severity android vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What impact could successful exploitation have?

Which environments are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What impact could successful exploitation have?

Which environments are identified as affected?