PT-2017-19137

CVE-2017-9724

·

Published

2017-09-21

·

Updated

2019-10-03

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel (affected versions not specified)
Description The issue allows user-level permissions to be used to gain access to kernel memory. Specifically, the ION cache maintenance code writes to a user-supplied address, which can be exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾