PT-2018-5997

CVE-2017-15826

·

Published

2018-03-30

·

Updated

2018-04-23

Description by

CVSS 2.0
4.4
Medium
MetricsAV:L/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-10-20 Firefox OS for MSM versions prior to 2017-10-20 QRD Android versions prior to 2017-10-20
Description: A double free issue may exist due to a race condition in the MDSS rotator. This occurs when two threads attempt to free the same perf structures, potentially leading to a double free vulnerability.
Recommendations: For Android for MSM versions prior to 2017-10-20, update to a version released after 2017-10-20 to resolve the issue. For Firefox OS for MSM versions prior to 2017-10-20, update to a version released after 2017-10-20 to resolve the issue. For QRD Android versions prior to 2017-10-20, update to a version released after 2017-10-20 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾