CVE-2017-7364

 

Published at: - 18-08-2017 09:29

Last modified: - 26-09-2022 05:45

Total changes: - 2

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://source.android.com/security/bulletin/2017-06-01
• 1038623-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2017-7364

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures