VULNERABILITY INTELLIGENCE

CVE-2017-9698

CVSS score7.8 HIGH

EPSS probability0.14%

CISA KEVNot currently listed

Published2017-12-05

Last modified2026-06-17

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improperly specified offset/size values for a submission command could cause a math operation to overflow and could result in an access to arbitrary memory. The combined pointer will overflow and possibly pass further checks intended to avoid accessing unintended memory.