Vulnetix
Try Vulnetix Request Demo
CVE-2017-11079 PUBLISHED CVSS 9.800000190734863 CRITICAL

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninitialized heap memory can potentially be flashed due to the lack of validation of sparse image block header size.

EPSS 0.16% · 37.3th percentile

Risk Scores

CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.16%
37.3th percentile

Affected Products

VendorProductVersions
Qualcomm, Inc.Android for MSM, Firefox OS for MSM, QRD AndroidAll Android releases from CAF using the Linux kernel
googleandroid

Timeline

References

Open in Interactive Console →