CVE-2017-15857

HIGH

Android - Out-of-Bounds Access in Camera Driver Region Params Copy

Title source: llm
STIX 2.1

Description

In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 6.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-129
Status published
Products (1)
google/android
Published Jun 12, 2018
Tracked Since Feb 18, 2026