PT-2017-11711 · Mozilla+2 · Firefox Os+2

Published 2017-12-05 · Updated 2017-12-19 · CVE-2017-11049

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description A race condition exists in the video driver of the affected systems, potentially leading to a buffer overflow.

Recommendations For Android for MSM, consider applying a patch or fix to resolve the issue, if available. For Firefox OS for MSM, consider applying a patch or fix to resolve the issue, if available. For QRD Android, consider applying a patch or fix to resolve the issue, if available. As a temporary workaround, consider restricting access to the video driver to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Race Condition

Weakness Enumeration

CWE-119

CWE-362

Related Identifiers

CVE-2017-11049

Affected Products

Android

Firefox Os

Qrd Android

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2017-11049 · Security Note
• https://source.android.com/security/bulletin/pixel/2017-12-01 · Vendor Advisory