CVE-2017-11010

CVE-2017-11010 describes a critical access control vulnerability in Android devices utilizing various Qualcomm Snapdragon chipsets, including IoT, Mobile, and several SD series processors, prior to the January 5, 2018 security update. This flaw allowed an attacker to access an unprotected configuration space. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, requiring no user interaction, and could lead to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it has not garnered widespread attention.