CVE-2017-14872

Name of the Vulnerable Software and Affected Versions: Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05

Description: A buffer over-read can potentially occur when flashing a meta image and the number of images exceeds the maximum range of 32.

Recommendations: For Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, ensure that the number of images does not exceed the maximum range of 32 when flashing a meta image to prevent a buffer over-read. At the moment, there is no information about a newer version that contains a fix for this vulnerability.