CVE-2017-8241

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect message length.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Jun 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-82425.9In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memoryCVE-2017-82437.8A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware imaCVE-2017-82447.0In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_bCVE-2017-82457.8In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by specifying a payload sCVE-2017-82467.8In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_dCVE-2017-82477.8In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operaCVE-2017-82489.8A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th CVE-2017-82507.8In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and "nr_bos" number are CVE-2017-82517.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_cmd & msm_isp_stats_upCVE-2017-82525.5Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon CVE-2017-82537.8In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid mCVE-2017-82545.5In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked
CVE-2017-8241: High severity, CVSS 7.8 | Vulnix