CVE-2017-14894

CVE-2017-14894 is a buffer overwrite vulnerability affecting Qualcomm Android, Firefox OS for MSM, and QRD Android devices running Linux kernel versions prior to the 2018-04-05 security patch level. The flaw occurs when the firmware provides a virtual device (vdev) ID exceeding the maximum allowed, leading to an out-of-bounds write in the wma_vdev_start_resp_handler() function. Rated with a CVSSv3 score of 7.3 (HIGH), this vulnerability is remotely exploitable with low attack complexity, requiring no user interaction or privileges. Successful exploitation could lead to partial loss of confidentiality, integrity, and availability of the affected system. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.