CVE-2017-8267 - In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write

Back Back to CVE browser

HIGH

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write

Published Aug 18, 2017

7.0

HIGH

CVSS 3.0

EPSS 0.36%

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write.

Affected products

Vendor Qualcomm, Inc. Product All Qualcomm products Default
n/a
- Version
  All Android releases from CAF using the Linux kernel
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Qualcomm, Inc.

All Qualcomm products

n/a

Version	Status	Constraints
All Android releases from CAF using the Linux kernel	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-190

Integer Overflow

CWE-362

Race Condition

References (2)

http://www.securityfocus.com/bid/99465
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2017-07-01
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/99465		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://source.android.com/security/bulletin/2017-07-01		x_refsource_CONFIRMVendor Advisory