CVE-2017-8256

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Aug 18, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-82577.8In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register CVE-2017-82585.5An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a cameCVE-2017-82597.8In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the vaCVE-2017-82607.8In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validatiCVE-2017-82617.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentiallyCVE-2017-82627.0In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race conditiCVE-2017-82637.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a CVE-2017-82647.8A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the LinCVE-2017-82657.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to CVE-2017-82667.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leadinCVE-2017-82677.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leadCVE-2017-82687.8In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command bu
CVE-2017-8256: High severity, CVSS 7.8 | Vulnix