CVE-2017-7364

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Aug 18, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-73657.8In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.CVE-2017-73665.5In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.CVE-2017-73677.8In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image.CVE-2017-73687.0In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver.CVE-2017-73697.8In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading toCVE-2017-73707.0In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free cCVE-2017-73717.8In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned oCVE-2017-73727.0In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow orCVE-2017-73737.8In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver.CVE-2017-73747.8Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dCVE-2017-73759.8A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DCVE-2017-73769.8Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling
CVE-2017-7364: Critical severity, CVSS 9.8 | Vulnix