CVE-2017-11087

—

CVSS 3.0

7.5 high

EPSS

<1%p42

Published

Mar 30, 2018 (Mar 30, 2018)

Modified

Jun 17, 2026

Description

libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larger than the output buffer's actual size, leading to an information disclosure problem in the context of mediaserver.

Vendors: google
Products: android
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.