VULNERABILITY INTELLIGENCE
CVE-2017-8269
CVSS score5.5 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2017-08-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to exposure of kernel memory.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- product-security@qualcomm.com — Third Party Advisory, VDB Entry
- product-security@qualcomm.com — Patch, Vendor Advisory
- product-security@qualcomm.com
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108