CVE-2017-9678

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy().

Weakness classification

• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

• product-security@qualcomm.com — Third Party Advisory, VDB Entry
• product-security@qualcomm.com — Patch, Vendor Advisory
• nvd@nist.gov — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory