CVE-2017-9677

HIGH

Android < 8.0 - Buffer Overflow via Race Condition in msm_compr_ioctl_shared

Title source: llm

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_length" could be accessed and modified by multiple threads, while it is not protected with locks. If one thread is running, while another thread is setting data, race conditions will happen. If "ddp->params_length" is set to a big number, a buffer overflow will occur.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/2017-09-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/100658

Scores

CVSS v3 7.8

EPSS 0.0031

EPSS Percentile 22.2%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119 CWE-362

Status published

Products (1)

google/android < 8.0

Published Sep 21, 2017

Tracked Since Feb 18, 2026