CVE-2017-9676

MEDIUM

Android < 8.0 - Exposure of Sensitive Information via Race Condition

Title source: llm

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing global static variables without using a lock.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2017-09-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100658

Scores

CVSS v3 4.7

EPSS 0.0027

EPSS Percentile 19.1%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-200 CWE-362 CWE-416

Status published

Products (1)

google/android < 8.0

Published Sep 21, 2017

Tracked Since Feb 18, 2026