CVE-2017-11013 | Vulnetix

CVE-2017-11013 PUBLISHED

Reported by qualcomm · Published November 16, 2017

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, countOffset (in function UnpackCore) is increased for each loop, while there is no boundary check against "pIe->arraybound".

Affected products

Vendor	Product	Versions
Qualcomm, Inc.	Android for MSM, Firefox OS for MSM, QRD Android	All Android releases from CAF using the Linux kernel
Qualcomm, Inc.	Android for MSM, Firefox OS for MSM, QRD Android	*

Timeline

Nov 7, 2017 CVE Published
Apr 14, 2021 EPSS Score (30 in total, the first dated here)
Jun 1, 2026 Security Advisory
Oct 4, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2017-11013
vulnetix vdb fixes CVE-2017-11013

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2017-11013/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

101774 vdb-entryx_refsource_BID
x_refsource_CONFIRM

Look up in the Resolve Platform →