CVEvulnerability
CVE-2017-11040
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to.
Affected configurations
• google android (<= 8.0)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/100658 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-09-01 Vendor Advisory
- http://www.securityfocus.com/bid/100658 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-09-01 Vendor Advisory