CVE-2017-7366

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-73677.8In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image.CVE-2017-73687.0In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver.CVE-2017-73697.8In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading toCVE-2017-73707.0In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free cCVE-2017-73717.8In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned oCVE-2017-73727.0In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow orCVE-2017-73737.8In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver.CVE-2017-73747.8Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dCVE-2017-73759.8A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DCVE-2017-73769.8Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling CVE-2017-73776.0The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cauCVE-2017-73785.5The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-bas
CVE-2017-7366: Medium severity, CVSS 5.5 | Vulnix