CVE-2017-11042

HIGH

Android for MSM - Missing Authorization in ImsService and IQtiImsExt AIDL APIs

Title source: llm
STIX 2.1

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, ImsService and the IQtiImsExt AIDL APIs are not subject to access control.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0001
EPSS Percentile 3.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-862
Status published
Products (2)
google/android
Qualcomm, Inc./Android for MSM, Firefox OS for MSM, QRD Android All Android releases from CAF using the Linux kernel
Published Dec 05, 2017
Tracked Since Feb 18, 2026