{"id":"CVE-2017-11027","aliases":["EUVD-2017-2664","GHSA-c6m2-hrr2-7ghp"],"status":"published","title":"In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...","description":"In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not validated for being smaller than minimum header size causing unintialized data access vulnerability.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00138,"percentile":0.03215,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2017-11-16T22:00:00Z","modified":"2026-06-17T01:01:06Z","products":[{"vendor":"google","product":"android"},{"vendor":"qualcomm, inc.","product":"android for msm, firefox os for msm, qrd android"}],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2017-11-01","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11027"},{"url":"https://github.com/advisories/GHSA-c6m2-hrr2-7ghp"}],"sources":{"cve":[{"id":"CVE-2017-11027","description":"In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not validated for being smaller than minimum header size causing unintialized data access vulnerability.","status":"published","published":"2017-11-16T22:00:00Z","modified":"2024-09-16T23:11:44.476Z","updated_at":"2026-11-02T14:33:19.848632Z"}],"euvd":[{"id":"EUVD-2017-2664","description":"In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not validated for being smaller than minimum header size causing unintialized data access vulnerability.","status":"published","published":"2017-11-16T22:00:00Z","modified":"2024-09-16T23:11:44Z","updated_at":"2026-11-03T00:54:55.705637Z"}],"ghsa":[{"id":"GHSA-c6m2-hrr2-7ghp","title":"In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...","description":"In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not validated for being smaller than minimum header size causing unintialized data access vulnerability.","status":"published","published":"2022-05-17T00:19:35Z","modified":"2023-02-03T05:01:27Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:52:59.355645Z"}],"nvd":[{"id":"CVE-2017-11027","description":"In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not validated for being smaller than minimum header size causing unintialized data access vulnerability.","status":"published","published":"2017-11-16T22:29:00.69Z","modified":"2026-06-17T01:01:06.8Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:08.635428Z"}]}}