VULNERABILITY INTELLIGENCE

CVE-2017-9691

CVSS score4.7 MEDIUM

EPSS probability0.12%

CISA KEVNot currently listed

Published2018-03-30

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicore driver.

Weakness classification

nvd@nist.gov: CWE-362

Primary references

product-security@qualcomm.com — Third Party Advisory, VDB Entry
product-security@qualcomm.com — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory