CVE-2017-11088

CVE Database · CVE-2017-11088

CVE-2017-11088

· N/AModified

CVSS v3.1

N/A

EPSS

0.65%

Published

Jul 6, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 835, SD 845.

Weaknesses (CWE)

CWE-89

Affected Products (28)

qualcomm · msm8909w_firmwarevulnerable

qualcomm · msm8909w

qualcomm · msm8996au_firmwarevulnerable

qualcomm · msm8996au

qualcomm · sd_210_firmwarevulnerable

qualcomm · sd_210

qualcomm · sd_212_firmwarevulnerable

qualcomm · sd_212

qualcomm · sd_205_firmwarevulnerable

qualcomm · sd_205

qualcomm · sd_430_firmwarevulnerable

· sd_430

References (2)

https://www.qualcomm.com/company/product-security/bulletins

Vendor Advisory

https://www.qualcomm.com/company/product-security/bulletins

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs