CVE-2017-8278: Buffer Overflow
Published Sep 5, 2017
·Updated
In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur.
Affected Software
2 affected components
Google Android<=8.0
Google Android
Event History
Sep 5, 2017
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityWeaknessAffected Software
Sep 21, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
Which devices are in scope?
The issue affects Qualcomm products with Android releases from CAF that use the Linux kernel. The affected component is an unspecified audio driver involved in reading audio data.
2
What access does an attacker need to exploit this?
The CVSS vector indicates local access is required, no privileges are required, and user interaction is required. Successful exploitation can affect confidentiality, integrity, and availability.