CVE-2017-8271

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an unsanitized userspace-controlled parameter.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Aug 11, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-82727.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly CVE-2017-82737.8In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot fea CVE-2017-82749.8In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 21 CVE-2017-82759.8In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD 450, SD 617, SD 625 CVE-2017-82767.8Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MD CVE-2017-82777.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm_dba_register_client, if the client regis CVE-2017-82787.8In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffe CVE-2017-82797.5In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, missing race condition prote CVE-2017-82807.0In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operatio CVE-2017-82814.7In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory wh CVE-2017-82827.8XnView Classic for Windows Version 2.40 allows user-assisted remote attackers to execute code via a crafted .mov file that is mishandled dur CVE-2017-82839.8dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indente