CVE-2017-11040
published 2017-09-21CVE-2017-11040: In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed…
PriorityP420medium5.5CVSS 3.0
AVLACLPRNUIRSUCHINAN
EPSS
0.37%
29.5th percentile
In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 8.0 | — | |
| android | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2017-11040: Video driver
vendor_android·2017-09-01·CVSS 5.5
CVE-2017-11040 [MEDIUM] CVE-2017-11040: Video driver
Android Security Bulletin 2017-09-01
CVE: CVE-2017-11040
Severity: MEDIUM
Type: ID
Component: Video driver
References: A-37567102*
QC-CR#2038166
GHSA
GHSA-7m55-qmhq-6477: In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it i
ghsa_unreviewed·2022-05-17
CVE-2017-11040 [MEDIUM] CWE-200 GHSA-7m55-qmhq-6477: In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it i
In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-09-21
Published