CVE-2017-8237

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Jun 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-82387.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function.CVE-2017-82395.5In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentiaCVE-2017-82407.8In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability.CVE-2017-82417.8In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect messaCVE-2017-82425.9In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memoryCVE-2017-82437.8A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware imaCVE-2017-82447.0In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_bCVE-2017-82457.8In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload sCVE-2017-82467.8In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_dCVE-2017-82477.8In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operaCVE-2017-82489.8A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th CVE-2017-82507.8In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and "nr_bos" number are
CVE-2017-8237: High severity, CVSS 7.8 | Vulnix