CVE-2017-9696
CVE-2017-9696
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
16 Nov 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer over-read is possible in camera driver function msm_isp_stop_stats_stream. Variable stream_cfg_cmd->num_streams is from userspace, and it is not checked against "MSM_ISP_STATS_MAX".
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD AndroidWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →