High severity7.5NVD Advisory· Published Oct 10, 2017· Updated Jun 17, 2026

CVE-2017-11060

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed during processing of ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST cfg80211 vendor commands in __wlan_hdd_cfg80211_set_passpoint_list and hdd_extscan_passpoint_fill_network_list function respectively. Android ID: A-36817548. References: QC-CR#2058447, QC-CR#2054770.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Android
cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*
Google/Android for MSMllm-create

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/101160nvdThird Party AdvisoryVDB Entry
source.android.com/security/bulletin/pixel/2017-10-01nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000