Security readout for executives and security teams
Plain-English summary
CVE-2017-11047 is a Qualcomm-related Android kernel graphics driver issue. The described bug could allow improper writes to kernel memory. That is serious because kernel memory controls core device security, but the provided sources do not include CVSS, confirmed exploitation, or detailed affected device lists.
Executive priority
Treat this as a kernel-level mobile platform risk with incomplete public detail. It deserves inventory and patch-status validation, especially for older Qualcomm-based Android fleets, but the sources do not support claims of active exploitation or broad emergency response.
Technical view
The CVE describes a graphics driver ioctl handler in Android for MSM, Firefox OS for MSM, QRD Android, and CAF Android Linux kernel releases. Missing copy_from_user() calls may allow writes to kernel memory. Public source detail is limited to the CVE description and Android/Pixel bulletin reference.
Likely exposure
Exposure is most relevant to devices or firmware based on Qualcomm Android for MSM, QRD Android, Firefox OS for MSM, or Android CAF Linux kernel releases. The supplied sources do not identify exact chipsets, device models, or fixed build numbers.
Exploitation context
The source bundle does not report active exploitation, and KEV is false. The vulnerability class suggests local kernel-impact risk through a graphics driver interface, but the provided evidence does not establish exploit availability, remote reachability, or real-world abuse.
Researcher notes
Key gaps are missing CVSS, CWE, fixed versions, device matrix, and exploit context. Research should focus on correlating OEM bulletins and CAF kernel branches with the Android/Pixel December 2017 bulletin without assuming unsupported products are affected.
Mitigation direction
- Check Qualcomm, Android, Pixel, and OEM guidance for CVE-2017-11047 applicability.
- Apply vendor firmware or Android security updates that explicitly address this CVE.
- Prioritize unsupported or CAF-derived Android devices for replacement or isolation review.
- Require current Android security patch levels in mobile device management policies.
Validation and detection
- Inventory Android devices using Qualcomm MSM, QRD, or CAF-derived firmware.
- Check device security patch levels against the December 2017 Android/Pixel bulletin.
- Confirm OEM advisory coverage for CVE-2017-11047 by device model and build.
- Flag devices without vendor-supported firmware updates for risk treatment.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-11047 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://source.android.com/security/bulletin/pixel/2017-12-01CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.