CVE-2017-8260

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Aug 18, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-82617.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentiallyCVE-2017-82627.0In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race conditiCVE-2017-82637.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a CVE-2017-82647.8A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the LinCVE-2017-82657.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to CVE-2017-82667.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leadinCVE-2017-82677.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leadCVE-2017-82687.8In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buCVE-2017-82695.5Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the LinuxCVE-2017-82707.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to aCVE-2017-82717.8Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernCVE-2017-82727.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly
CVE-2017-8260: High severity, CVSS 7.8 | Vulnix