CVE-2017-8260

HIGH

Qualcomm Android Kernel - Out-of-Bounds Write via Type Downcast Validation Bypass

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-8260. PoCs published by ScottyBauer.

AI-analyzed exploit summary This PoC exploits a vulnerability in the Qualcomm MSM camera driver by sending maliciously crafted ioctl commands to trigger a buffer overflow. The code initializes the camera subsystem and then sends a large number of entries to overflow the buffer.

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later.

Exploits (1)

github WORKING POC 682 stars
by ScottyBauer · cpoc
https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/tree/master/CVE-2017-8260.c

This PoC exploits a vulnerability in the Qualcomm MSM camera driver by sending maliciously crafted ioctl commands to trigger a buffer overflow. The code initializes the camera subsystem and then sends a large number of entries to overflow the buffer.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: Qualcomm MSM camera driver (Android Kernel)
No auth needed
Prerequisites: Access to the target device's /dev/v4l-subdev17
devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2017-07-01
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99465

Scores

CVSS v3 7.8
EPSS 0.0053
EPSS Percentile 40.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-20 CWE-787
Status published
Products (2)
google/android
Qualcomm, Inc./All Qualcomm products All Android releases from CAF using the Linux kernel
Published Aug 18, 2017
Tracked Since Feb 18, 2026