CVE-2017-11079 In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninitialized heap memory can potentially be flashed due....
CriticalCVSS 9.8
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninitialized heap memory can potentially be flashed due to the lack of validation of sparse image block header size.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | All versions | No fix listed |
| qualcomm Android for MSM, Firefox OS for MSM, QRD Android | = All Android releases from CAF using the Linux kernel | No fix listed |
References
- source.android.com patch vendor-advisory