CVE-2017-9680

High

Published: 18/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Qualcomm products with Android releases from CAF, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.

Risk Assessment

This may lead to unpredictable system behavior, posing risks to the stability and security of devices.

Recommendation

It is recommended to update the software to the latest version to minimize the risks associated with this vulnerability.

Other vulnerabilities in Qualcomm Android products using the Linux kernel

CVE-2017-8251High
In Qualcomm products with Android releases from CAF, in functions msm_isp_check_stream_cfg_cmd and msm_isp_stats_update_cgc_override, the value 'stream_cfg_cmd->num_streams' is not checked, which could lead to an overflow of the array stream_cfg_cmd->stream_handle.

Original NVD description (English source)

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS