CVE-2017-11092

High

Published: 16/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Android for MSM, Firefox OS for MSM, and QRD Android, a Use After Free condition may occur in the kgsl_ioctl_gpu_command function of the KGSL driver.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized memory access, posing risks to the integrity and confidentiality of user data.

Recommendation

It is recommended to update the system to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in KGSL driver

CVE-2017-11044High
In Android for MSM, Firefox OS for MSM, and QRD Android, a race condition exists in a KGSL driver function that can lead to a Use After Free condition.

Original NVD description (English source)

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the KGSL driver function kgsl_ioctl_gpu_command, a Use After Free condition can potentially occur.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS