{"id":"CVE-2017-14872","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-14872","generatedAt":"2026-10-29T02:44:15.634Z","title":"While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security…","description":"While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.","published":"2018-07-06T17:29:00.000Z","lastModified":"2026-06-17T01:06:54.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.0","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-125"],"affected":["google/android"],"epss":{"score":0.00166,"percentile":0.05746,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components","tags":["Patch","Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=1daa83baa41d1e6291e89f69e6487695b6890c01","tags":["Patch"],"source":"product-security@qualcomm.com"},{"url":"https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=1daa83baa41d1e6291e89f69e6487695b6890c01","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-14872","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}