CVE-2017-9691

EPSS 0.1%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

30 mar 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicore driver.

Productos afectados

Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD Android

Referencias

https://www.codeaurora.org/security-bulletin/2017/11/28/november-2017-security-bulletin http://www.securityfocus.com/bid/100213