CVEvulnerability
CVE-2017-9725
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-09-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-682
Description
In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
Affected configurations
• google android (<= 8.0)
Related
Weakness · CWE (1)
- CWE-682 Incorrect Calculation weakness
References
- http://www.securityfocus.com/bid/100658 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:0676 access.redhat.com
- https://access.redhat.com/errata/RHSA-2018:1062 access.redhat.com
- https://access.redhat.com/errata/RHSA-2018:1130 access.redhat.com
- https://access.redhat.com/errata/RHSA-2018:1170 access.redhat.com
- https://source.android.com/security/bulletin/2017-09-01 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/100658 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:0676 access.redhat.com
- https://access.redhat.com/errata/RHSA-2018:1062 access.redhat.com
- https://access.redhat.com/errata/RHSA-2018:1130 access.redhat.com
- https://access.redhat.com/errata/RHSA-2018:1170 access.redhat.com
- https://source.android.com/security/bulletin/2017-09-01 Patch, Vendor Advisory