CVE-2017-8280

HIGH

Android < 8.0 - Memory Corruption via WLAN Calibration Data Race Condition

Title source: llm

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some potential race conditions which lead to a memory leak and a buffer overflow during the context switch.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2017-09-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100658

Scores

CVSS v3 7.0

EPSS 0.0029

EPSS Percentile 20.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119 CWE-362 CWE-772

Status published

Products (1)

google/android < 8.0

Published Sep 21, 2017

Tracked Since Feb 18, 2026