7.8high
CVE-2017-8271
Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux ker…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
7.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 32%
Public exploits
0
none known
Summary
Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an unsanitized userspace-controlled parameter.
Exploit prediction (EPSS)
0.38% probability of exploitation in the next 30 days, higher than 32% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.8 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Affected products
- Qualcomm, Inc. All Qualcomm products
Classification
- Weakness
- CWE-787 Out-of-bounds Write
References
- source.android.com /security/bulletin/2017-07-01 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/99465 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-8271
- NVD: CVE-2017-8271
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.