VULNERABILITY INTELLIGENCE
CVE-2017-18066
CVSS score7.8 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2018-03-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper controls in MSM CORE leads to use memory after it is freed in msm_core_ioctl().
Weakness classification
- CWE-416: Use After Free
Primary references
- product-security@qualcomm.com — Vendor Advisory
- product-security@qualcomm.com — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory