CVE-2017-14885

CVE-2017-14885 is a buffer overflow vulnerability affecting Android for MSM, Firefox OS for MSM, and QRD Android devices utilizing the Linux kernel. The flaw occurs in the wma_unified_link_peer_stats_event_handler function, where insufficient validation of the sum of 'num_rates' values can lead to a buffer overflow when copying firmware data. This vulnerability is rated as High severity (CVSS 7.8), indicating that a local attacker with low privileges could exploit it with low complexity, potentially leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.