CVE-2017-11014: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux ker...

Security readout for executives and security teams

This CVE describes a buffer overflow in Qualcomm-related Android/CAF Linux kernel wireless roaming handling. The public bundle does not provide CVSS, CWE, exploitability, or impact details. Treat it as a legacy mobile platform exposure concern for devices still running affected Qualcomm CAF-based Android kernels without the relevant 2017 vendor security updates. Likely exposure is limited to Qualcomm MSM/CAF-derived Android or Firefox OS builds from the affected era that did not receive the November 2017 Android or corresponding OEM security fixes. Current exposure depends on device model, OEM firmware lineage, and patch level. Prioritize as a legacy asset hygiene issue unless the organization still operates affected Qualcomm Android devices. The business risk is uncertainty: public severity and exploitation details are missing, but kernel buffer overflows in mobile networking components can be material when unpatched devices remain deployed. Mitigation focus: Check OEM and Android November 2017 security bulletin guidance for applicable fixes.; Update affected devices to a firmware level containing the relevant Qualcomm/Android security patches.; Retire unsupported Qualcomm CAF-based devices that cannot receive security updates..

Prepared

Jun 12, 2026, 20:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.