{"api_version":"1","generated_at":"2026-07-23T04:30:07+00:00","cve":"CVE-2017-11072","urls":{"html":"https://cve.report/CVE-2017-11072","api":"https://cve.report/api/cve/CVE-2017-11072.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-11072","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-11072"},"summary":{"title":"CVE-2017-11072","description":"In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while calculating CRC for GPT header fields with partition entries greater than 16384 buffer overflow occurs.","state":"PUBLIC","assigner":"product-security@qualcomm.com","published_at":"2018-01-16 16:29:00","updated_at":"2018-02-02 16:00:00"},"problem_types":["CWE-119"],"metrics":[],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2018-01-01","name":"https://source.android.com/security/bulletin/pixel/2018-01-01","refsource":"CONFIRM","tags":["Patch","Vendor Advisory"],"title":"Pixel / Nexus Security Bulletin—January 2018  |  Android Open Source Project","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11072","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11072","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"11072","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"google","cpe5":"android","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"11072","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"google","cpe5":"android","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"product-security@qualcomm.com","DATE_PUBLIC":"2018-01-02T00:00:00","ID":"CVE-2017-11072","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Android for MSM, Firefox OS for MSM, QRD Android","version":{"version_data":[{"version_value":"All Android releases from CAF using the Linux kernel"}]}}]},"vendor_name":"Qualcomm, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while calculating CRC for GPT header fields with partition entries greater than 16384 buffer overflow occurs."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Buffer Copy without Checking Size of Input in Boot"}]}]},"references":{"reference_data":[{"name":"https://source.android.com/security/bulletin/pixel/2018-01-01","refsource":"CONFIRM","url":"https://source.android.com/security/bulletin/pixel/2018-01-01"}]}},"nvd":{"publishedDate":"2018-01-16 16:29:00","lastModifiedDate":"2018-02-02 16:00:00","problem_types":["CWE-119"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"severity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:google:android:-:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"11072","Ordinal":"108116","Title":"CVE-2017-11072","CVE":"CVE-2017-11072","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"11072","Ordinal":"1","NoteData":"In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while calculating CRC for GPT header fields with partition entries greater than 16384 buffer overflow occurs.","Type":"Description","Title":null},{"CveYear":"2017","CveId":"11072","Ordinal":"2","NoteData":"2018-01-16","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"11072","Ordinal":"3","NoteData":"2018-01-16","Type":"Other","Title":"Modified"}]}}}