CVE-2017-11014 describes a buffer overflow vulnerability affecting Android for MSM, Firefox OS for MSM, and QRD Android devices utilizing the Linux kernel from CAF. This flaw occurs during the parsing of a Measurement Request Information Element (IE) within a Roam Neighbor Action Report. With a CVSS v3 score of 7.8 (High), successful exploitation could lead to high impact on confidentiality, integrity, and availability, requiring user interaction but no privileges. While the vulnerability is significant, there is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable. Community discussion and media coverage are minimal, suggesting limited public awareness or active threat actor interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.