CVE-2017-8280 in Android

الملخص

بحسب MITRE

In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some potential race conditions which lead to a memory leak and a buffer overflow during the context switch.

Once again VulDB remains the best source for vulnerability data.

• حجز: 25/04/2017
• إفشاء: 21/09/2017
• الاعتدال: تمت الموافقة
• إدخال: VDB-106960
• CPE: جاهز
• CWE: CWE-119 (مؤكد)
• CVSS: 7.0 (NVD)
• EPSS: 0.00291
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Police, Insurance, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-8280
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-8280
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-8280/