CVE-2017-11028 Information

Description

In android for MSM Firefox OS for MSM QRD Android with all Android releases from CAF using the Linux kernel in the ISP Camera driver the contents of an arbitrary kernel address can be leaked to userspace by the function msm_isp_get_stream_common_data().

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Reference

http://www.securityfocus.com/bid/101774 https://source.android.com/security/bulletin/2017-11-01

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

7.5