CVE-2017-14869

CVE-2017-14869 describes a vulnerability in Android for MSM, Firefox OS for MSM, and QRD Android, affecting all Android releases from CAF utilizing the Linux kernel. During a FOTA partition update, uninitialized data can be written to storage, potentially leading to information disclosure. With a CVSS score of 7.5 (High), this vulnerability is remotely exploitable with low attack complexity, allowing an unauthenticated attacker to achieve high confidentiality impact without requiring user interaction. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat landscape.