CVE-2017-11092: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux ker...

Security readout for executives and security teams

CVE-2017-11092 is a Qualcomm Android kernel GPU-driver flaw. In affected CAF-derived Android builds, the KGSL driver may mishandle freed memory. The source bundle does not provide CVSS, impact detail, or proof of exploitation, so urgency depends on whether legacy Qualcomm MSM devices remain in use and whether vendor firmware updates were applied. Most relevant exposure is legacy Qualcomm MSM or CAF-derived Android device fleets, including QRD Android and Firefox OS for MSM. Exposure cannot be determined from product name alone; it depends on the device kernel lineage and whether OEM or vendor security updates incorporated the November 2017 Android bulletin fix path. Set priority after inventory. If affected legacy devices handle sensitive data or remain broadly deployed, prioritize remediation because kernel driver memory errors can be high-impact. If devices are patched or retired, residual business risk is lower. The available evidence does not support an emergency active-exploitation response. Mitigation focus: Check OEM and Qualcomm guidance for CVE-2017-11092 coverage.; Apply vendor-supported firmware or Android security updates for affected devices.; Retire unsupported devices that cannot receive relevant kernel fixes..

Prepared

Jun 12, 2026, 20:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.