Security readout for executives and security teams
Plain-English summary
This is a Qualcomm-related Android kernel memory-safety flaw. On affected Qualcomm/CAF-based mobile builds older than the 2018-04-05 security patch level, a specific multi-threaded userspace interaction could cause a use-after-free condition. The sources do not provide severity scoring or confirmed exploitation.
Executive priority
Prioritize this as a legacy mobile exposure review, not an emergency based on available evidence. The main business risk is unpatched Qualcomm-based Android devices remaining in production without clear vendor support or patch verification.
Technical view
CVE-2017-11075 affects Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android releases from CAF using Linux kernels before security patch level 2018-04-05. The flaw is a potential use-after-free in wdsp_glink_write() when cmd_pkt and reg_pkt are called from different userspace threads.
Likely exposure
Exposure is most likely in legacy Qualcomm MSM or CAF-derived Android kernel builds that did not receive the 2018-04-05 Android security patch level. The bundle does not identify specific device models, distributions, or CPEs.
Exploitation context
The provided sources do not show KEV listing, active exploitation, public exploit availability, or remote attackability. Evidence only supports a userspace-triggered kernel memory-safety condition under concurrent thread behavior.
Researcher notes
The source bundle lacks CVSS, CWE, affected CPEs, model mapping, exploit status, and detailed fix commits. Analysis should stay tied to patch-level verification and vendor/OEM advisories rather than assuming broader product impact.
Mitigation direction
- Update affected devices to Android security patch level 2018-04-05 or later.
- Check Qualcomm, OEM, and Android bulletin guidance for device-specific fixes.
- Retire or isolate unsupported legacy devices that cannot receive vendor kernel updates.
- Prioritize mobile fleets using Qualcomm MSM or CAF-derived Android builds.
Validation and detection
- Inventory Android devices by OEM, chipset family, and security patch level.
- Confirm each device reports Android security patch level 2018-04-05 or later.
- Review kernel provenance for CAF-derived Qualcomm MSM builds.
- Check OEM advisories for CVE-2017-11075 coverage on deployed models.
- Document unsupported devices that cannot be verified or patched.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-11075 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://source.android.com/security/bulletin/pixel/2018-04-01CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.