CVE-2017-11011: In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206...

Security readout for executives and security teams

CVE-2017-11011 is a Qualcomm-related Android vulnerability affecting listed Snapdragon Mobile and Wear chipsets before Android security patch level 2018-04-05. The public description says a use-after-free can occur in a communication API. Business impact depends on whether older, unpatched Android or embedded devices remain in use. Exposure is most likely in legacy Android phones, wearables, modems, or embedded devices using the listed Qualcomm chipsets and lacking Android security patch level 2018-04-05 or later. Treat this as a legacy exposure management issue unless your environment still runs affected Qualcomm-based Android devices. Prioritize inventory, patch verification, and replacement planning. The urgency increases for unmanaged, internet-connected, or unsupported devices, but the provided sources do not establish active exploitation. Mitigation focus: Apply Android security patch level 2018-04-05 or later where available.; Confirm OEM firmware includes the relevant Qualcomm security update.; Replace or isolate unsupported devices that cannot receive vendor updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.