← CVE Intelligence

CVE-2017-9681

Qualcomm, Inc. / Android for MSM, Firefox OS for MSM, QRD Android PUBLISHED

Description (CNA)

In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel memory address is passed from userspace through iris_vidioc_s_ext_ctrls ioctl, it will print kernel address data. A user could set it to an arbitrary kernel address, hence information disclosure (for kernel) could occur.

Affected (CNA)

Vendor / productVersions
Qualcomm, Inc. / Android for MSM, Firefox OS for MSM, QRD Androidaffected All Android releases from CAF using the Linux kernel

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.