CVEvulnerability
CVE-2017-11001
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause out of bounds read.
Affected configurations
• google android (<= 8.0)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/100658 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-09-01 Vendor Advisory
- http://www.securityfocus.com/bid/100658 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-09-01 Vendor Advisory