CVE-2017-8262

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race condition can potentially occur leading to a Use After Free condition.

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362CWE-416

Affected software

VendorProductVersions
Qualcomm, Inc.All Qualcomm productsAll Android releases from CAF using the Linux kernel

References

Timeline

Published
Aug 18, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-82637.8In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a CVE-2017-82647.8A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the LinCVE-2017-82657.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to CVE-2017-82667.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leadinCVE-2017-82677.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leadCVE-2017-82687.8In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buCVE-2017-82695.5Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the LinuxCVE-2017-82707.0In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to aCVE-2017-82717.8Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernCVE-2017-82727.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properlyCVE-2017-82737.8In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feaCVE-2017-82749.8In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 21
CVE-2017-8262: High severity, CVSS 7.0 | Vulnix