CVE-2017-8254

MEDIUM

Google Android - Information Disclosure

Title source: rule

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid.

References (2)

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 19.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
google/android
Qualcomm, Inc./All Qualcomm products < All Android releases from CAF using the Linux kernel
Published Aug 18, 2017
Tracked Since Feb 18, 2026