CVE-2017-7369

published 2017-06-13

CVE-2017-7369: In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack…

Priority P4 33 high 7.8 CVSS 3.0

AV L AC L PR N UI R S U C H I H A H

In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	linux	—	—
google	android	—	—
qualcomm_inc	all_qualcomm_products	—	—

CVSS provenance

nvd v3.0 7.8 HIGH CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvd v2.0 9.3 CRITICAL AV:N/AC:M/Au:N/C:C/I:C/A:C

vendor_debian 7.8 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20