Uninitialized Data Access Vulnerability in Android Flashing Process

CVE-2017-11027 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not validated for being smaller than minimum header size causing unintialized data access vulnerability.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.