CVE-2017-11000

HIGH

Android < 8.0 - Out-of-Bounds Write in ISP Camera Kernel Driver

Title source: llm

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2017-09-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100658

Scores

CVSS v3 7.8

EPSS 0.0037

EPSS Percentile 28.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (1)

google/android < 8.0

Published Sep 21, 2017

Tracked Since Feb 18, 2026