CVE-2017-9708
CVE-2017-9708
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
05 Dec 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the camera driver, the function "msm_ois_power_down" is called without a mutex and a race condition can occur in variable "*reg_ptr" of sub function "msm_camera_config_single_vreg".
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android