CVE-2017-8251

High

Published: 21/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Qualcomm products with Android releases from CAF, in functions msm_isp_check_stream_cfg_cmd and msm_isp_stats_update_cgc_override, the value 'stream_cfg_cmd->num_streams' is not checked, which could lead to an overflow of the array stream_cfg_cmd->stream_handle.

Risk Assessment

The overflow of the array may lead to unauthorized memory access, posing a risk to the integrity and confidentiality of data within the system.

Recommendation

It is recommended to implement proper checks in the code to ensure that the 'num_streams' value is correctly validated before use.

Other vulnerabilities in Qualcomm Android products using the Linux kernel

CVE-2017-9680High
In Qualcomm products with Android releases from CAF, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.

Original NVD description (English source)

In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_cmd & msm_isp_stats_update_cgc_override, 'stream_cfg_cmd->num_streams' is not checked, and could overflow the array stream_cfg_cmd->stream_handle.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS