Not rated
CVE-2017-7364 In all Qualcomm products with Android releases from CAF using the Linux kernel, in function…
Description
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| All Qualcomm products | Versions not published |
References
- source.android.com source.android.com
- 1038623 www.securitytracker.com
Timeline
- Published
- Last modified
Other CVEs of All Qualcomm products
The 194 CVEs of All Qualcomm products →
CVE-2017-9684
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can…
Not rated
CVE-2017-9685
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can…
Not rated
CVE-2017-9682
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver…
Not rated
CVE-2017-9678
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can…
Not rated