CVE-2017-8246 in Google Android
要約 (英語)
In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_data. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resulting in a dangling pointer. There are other functions that access the same memory (substream->runtime->private_data) with a NULL check, such as msm_pcm_volume_ctl_put(), which means this freed memory could be used.
予約する
2017年04月25日
公開
2017年05月12日
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 101214 | Google Android Linux Kernel msm_pcm_playback_close 無償 メモリ破損 | 416 | 未定義 | 公式な修正 | CVE-2017-8246 |