Security readout for executives and security teams
Plain-English summary
CVE-2017-11058 is a Qualcomm Android kernel issue where malformed wireless vendor-command handling can read beyond a buffer. The affected scope is limited in the sources to Android for MSM, Firefox OS for MSM, QRD Android, and CAF-based Android Linux kernel releases. Public severity and impact details are incomplete.
Executive priority
Treat this as an exposure-management issue for legacy Qualcomm Android fleets. Urgency rises where devices are unsupported, handle sensitive data, or cannot prove vendor patch coverage. The public record does not support claiming active exploitation.
Technical view
The flaw is a buffer over-read during processing of a specially crafted cfg80211 vendor command in Qualcomm MSM/CAF Android Linux kernel code. The bundle provides no CVSS score, CWE, prerequisites, privilege requirement, or confirmed impact beyond over-read behavior.
Likely exposure
Exposure is most likely in older Qualcomm MSM-based Android builds using CAF Linux kernel releases, especially unsupported or unpatched device firmware. Mainstream exposure depends on device vendor integration and patch level, which must be verified per model.
Exploitation context
No CISA KEV listing is provided, and no cited source states active exploitation. The source notes a specially crafted cfg80211 vendor command, but the bundle does not establish remote reachability, required privileges, or practical exploitability.
Researcher notes
Key gaps are CVSS, CWE, affected version granularity, attack vector, and fixed commit details. Validation should focus on OEM advisory mapping and kernel lineage, not assumptions from generic Android version numbers.
Mitigation direction
- Check device vendor guidance for CVE-2017-11058 patch status.
- Apply available Android, Pixel, Qualcomm, or OEM security updates.
- Prioritize unsupported Qualcomm Android devices for retirement or isolation.
- Track Android security patch levels across managed mobile assets.
- Limit sensitive access from devices without confirmed patch coverage.
Validation and detection
- Inventory Qualcomm MSM Android devices and firmware versions.
- Identify whether builds use CAF-derived Linux kernel components.
- Compare each device patch level against vendor bulletins.
- Confirm CVE-2017-11058 is addressed in OEM release notes.
- Flag devices with no vendor patch evidence for risk review.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-11058 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://source.android.com/security/bulletin/pixel/2017-11-01CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.