CVE-2017-8246

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_data. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resulting in a dangling pointer. There are other functions that access the same memory (substream->runtime->private_data) with a NULL check, such as msm_pcm_volume_ctl_put(), which means this freed memory could be used.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.Android for MSM, Firefox OS for MSM, QRD AndroidAll Android releases from CAF using the Linux kernel

References

Timeline

Published
May 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-82477.8In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operaCVE-2017-82489.8A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th CVE-2017-82507.8In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and "nr_bos" number are CVE-2017-82517.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_cmd & msm_isp_stats_upCVE-2017-82525.5Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon CVE-2017-82537.8In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid mCVE-2017-82545.5In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checkedCVE-2017-82557.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.CVE-2017-82567.8In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends moreCVE-2017-82577.8In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register CVE-2017-82585.5An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a cameCVE-2017-82597.8In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the va
CVE-2017-8246: High severity, CVSS 7.8 | Vulnix