Qualcom (and other) Android CVE IDs

[Art Manion <amanion@cert.org>]

Good to see CVE used to identify vulnerabilities:

  
https://source.android.com/security/bulletin/2017-06-01#qualcomm-closed-source-components

but there's little or no information about any of these 
vulnerabilities.  Lots of RESERVED.

This touches on the use of CVE for "internal" finds.  There's value in 
having a public label, but the lack of even summary information 
(minimal CVE entry) is problematic.

 - Art