CVE-2017-11035

CVE-2017-11035 describes a buffer overflow or information leak vulnerability affecting Android for MSM, Firefox OS for MSM, and QRD Android releases from CAF using the Linux kernel. This flaw, stemming from incorrect initialization of WEXT callbacks and insufficient buffer size checks in "sme_set_ft_ies" and "csr_roam_issue_ft_preauth_req" functions, could allow an attacker to gain elevated privileges or access sensitive information. With a CVSS score of 7.8 (High), it presents a significant risk, requiring local access but having high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this vulnerability.