CVE Database
/

CVE-2017-14877

Back to search

CVE-2017-14877

Published: Mar 30, 2018

Modified: Sep 16, 2024

PUBLISHED

Description

While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory. If one thread sends an ioctl cmd IPA_IOC_QUERY_RT_TBL_INDEX while another sends an ioctl cmd IPA_IOC_DEL_RT_RULE, a use-after-free condition may occur.

VendorProductVersions

Qualcomm, Inc.

Android for MSM, Firefox OS for MSM, QRD Android

affected
All Android releases from CAF using the Linux kernel

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now