VULNERABILITY INTELLIGENCE

CVE-2017-11001

CVSS score5.5 MEDIUM

EPSS probability0.37%

CISA KEVNot currently listed

Published2017-09-21

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause out of bounds read.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

product-security@qualcomm.com — Third Party Advisory, VDB Entry
product-security@qualcomm.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory