VULNERABILITY INTELLIGENCE

CVE-2017-9676

CVSS score4.7 MEDIUM

EPSS probability0.27%

CISA KEVNot currently listed

Published2017-09-21

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing global static variables without using a lock.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-416: Use After Free

Primary references

product-security@qualcomm.com — Third Party Advisory, VDB Entry
product-security@qualcomm.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory