CVE-2017-8257

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published
Aug 18, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-82585.5An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a cameCVE-2017-82597.8In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the vaCVE-2017-82607.8In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validatiCVE-2017-82617.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentiallyCVE-2017-82627.0In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race conditiCVE-2017-82637.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a CVE-2017-82647.8A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the LinCVE-2017-82657.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to CVE-2017-82667.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leadinCVE-2017-82677.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leadCVE-2017-82687.8In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buCVE-2017-82695.5Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux
CVE-2017-8257: High severity, CVSS 7.8 | Vulnix