CVE-2017-11028: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux ker...

Security readout for executives and security teams

This is a Qualcomm Android kernel information disclosure issue in the camera ISP driver. Affected devices may expose kernel memory contents to userspace. The source bundle does not show public exploitation, CVSS scoring, or direct business impact, but kernel memory leaks can weaken platform hardening when chained with other flaws. Exposure is most likely on legacy Qualcomm MSM-based Android or CAF-derived builds containing the vulnerable ISP Camera driver. The bundle does not identify exact device models, kernel versions, or downstream OEM patch status, so asset matching requires vendor build and bulletin correlation. Treat this as a legacy mobile platform hygiene issue unless affected devices remain in production. It does not have confirmed exploitation in the provided sources, but unresolved kernel information leaks can support broader attack chains and should be closed through vendor-supported updates. Mitigation focus: Apply the Android November 2017 security bulletin updates where applicable.; Check OEM or device vendor advisories for Qualcomm CAF kernel patch inclusion.; Retire or isolate unsupported devices that cannot receive security updates..

Prepared

Jun 12, 2026, 20:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.