5.5med
CVE-2017-8269
Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linu…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
5.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 41%
Public exploits
0
none known
Summary
Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to exposure of kernel memory.
Exploit prediction (EPSS)
0.47% probability of exploitation in the next 30 days, higher than 41% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Affected products
- Qualcomm, Inc. All Qualcomm products
Classification
- Weakness
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
- source.android.com /security/bulletin/2017-07-01 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/99465 · vdb-entry, x_refsource_BID, x_transferred
- source.android.com /security/bulletin/pixel/2018-04-01 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2017-8269
- NVD: CVE-2017-8269
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.