CVE-2017-9677: Buffer Overflow
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msmcomprioctlshared, variable "ddp->paramslength" could be accessed and modified by multiple threads, while it is not protected with locks. If one thread is running, while another thread is setting data, race conditions will happen. If "ddp->paramslength" is set to a big number, a buffer overflow will occur.
Affected Software
Event History
Frequently Asked Questions
Which systems are in scope?
The issue affects Qualcomm products using Android releases from CAF with the Linux kernel. The provided data does not identify specific device models or Android versions.
What access does an attacker need?
The CVSS vector indicates local access, low attack complexity, no required privileges, and required user interaction. Exploitation involves concurrent threads accessing and modifying the unprotected params_length value.