VULNERABILITY INTELLIGENCE

CVE-2017-9725

CVSS score7.8 HIGH
EPSS probability1.23%
CISA KEVNot currently listed
Published2017-09-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.

Weakness classification

  • CWE-682: Incorrect Calculation

Primary references