CVE-2017-9698

HIGH

Android for MSM, Firefox OS for MSM, QRD Android - Memory Corruption via Improper Offset/Size Handling

Title source: llm

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improperly specified offset/size values for a submission command could cause a math operation to overflow and could result in an access to arbitrary memory. The combined pointer will overflow and possibly pass further checks intended to avoid accessing unintended memory.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_confirm

https://source.android.com/security/bulletin/pixel/2017-12-01

Scores

CVSS v3 7.8

EPSS 0.0002

EPSS Percentile 4.1%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (2)

google/android

Qualcomm, Inc./Android for MSM, Firefox OS for MSM, QRD Android All Android releases from CAF using the Linux kernel

Published Dec 05, 2017

Tracked Since Feb 18, 2026