CVE-2017-11087

HIGH

Android libOmxVenc - Information Disclosure via Output Buffer Copy

Title source: llm
STIX 2.1

Description

libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larger than the output buffer's actual size, leading to an information disclosure problem in the context of mediaserver.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/103669

Scores

CVSS v3 7.5
EPSS 0.0054
EPSS Percentile 41.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
google/android
Published Mar 30, 2018
Tracked Since Feb 18, 2026