CVE-2017-8247

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to get_pid being called more than once, however put_pid being called only once in function "msm_close".

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Sep 21, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-82489.8A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th CVE-2017-82507.8In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and "nr_bos" number are CVE-2017-82517.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_cmd & msm_isp_stats_upCVE-2017-82525.5Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon CVE-2017-82537.8In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid mCVE-2017-82545.5In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checkedCVE-2017-82557.8In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.CVE-2017-82567.8In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends moreCVE-2017-82577.8In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register CVE-2017-82585.5An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a cameCVE-2017-82597.8In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the vaCVE-2017-82607.8In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validati
CVE-2017-8247: High severity, CVSS 7.8 | Vulnix