CVE-2017-11041
HighSummary
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue where an output buffer is accessed in one thread and can be potentially freed in another.
Risk Assessment
This may lead to unpredictable application behavior, potentially resulting in memory leaks or system crashes.
Recommendation
It is recommended to update to the latest software versions that address this memory management issue.
Other vulnerabilities in Produkty Qualcomm z Androidem od CAF korzystające z jądra Linux
See all- CVE-2016-5871Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an image file.
- CVE-2016-10387Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to an assertion that could be reachable in a handover scenario.
- CVE-2016-10381Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to an issue where the UE can send unprotected MeasurementReports revealing UE location.
- CVE-2016-10380Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to revealing the end user's (UE) location through unprotected MeasurementReports.
- CVE-2015-9062Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an ELF file.
- CVE-2015-9054Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue during GAL decoding.
- CVE-2015-9053Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in the processing of certain responses from the USIM.
- CVE-2015-9050Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability that allows for out of bounds array access during a CA call.
- CVE-2015-9048Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability in the processing of lost RTP packets.
- CVE-2015-9043Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue upon timer expiry.
Original NVD description (English source)
In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be potentially freed in another.