CVE-2017-14907

Critical

Published: 05/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Android for MSM, Firefox OS for MSM, and QRD Android, there is an issue with reduced cryptographic strength while deriving the disk encryption key. This affects all Android releases from CAF using the Linux kernel.

Risk Assessment

The reduction in cryptographic strength may lead to easier access to data stored on devices, posing a serious threat to information security.

Recommendation

It is recommended to update systems to the latest versions that address this vulnerability and implement additional data protection measures.

Original NVD description (English source)

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, cryptographic strength is reduced while deriving disk encryption key.