CVE-2017-8260

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20CWE-787

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Aug 18, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-82617.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentiallyCVE-2017-82627.0In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race conditiCVE-2017-82637.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a CVE-2017-82647.8A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the LinCVE-2017-82657.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to CVE-2017-82667.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leadinCVE-2017-82677.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leadCVE-2017-82687.8In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buCVE-2017-82695.5Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the LinuxCVE-2017-82707.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to aCVE-2017-82717.8Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernCVE-2017-82727.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly
CVE-2017-8260: High severity, CVSS 7.8 | Vulnix