CVE-2017-10998: Buffer Overflow
In all Qualcomm products with Android releases from CAF using the Linux kernel, in audioaioionlookupvaddr, the buffer length, which is user input, ends up being used to validate if the buffer is fully within the valid region. If the buffer length is large enough then the address + length operation could overflow and produce a result far below the valid region.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates local attack access, no privileges required, and user interaction is required. The attack complexity is rated low.
What could successful exploitation allow?
The vulnerability is rated High severity with high impact to confidentiality, integrity, and availability. It involves an integer overflow in buffer-boundary validation that can cause a buffer to be treated as within a valid region when it is not.
Where can teams look for remediation information?
The supplied references include a Qualcomm kernel source commit and the Android Security Bulletin dated 2017-09-01. The provided data does not identify specific fixed Android or kernel version numbers.