CVE-2017-8254
published 2017-08-18CVE-2017-8254: In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid.
PriorityP420medium5.5CVSS 3.0
AVLACLPRNUIRSUCHINAN
EPSS
0.37%
28.7th percentile
In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| qualcomm_inc | all_qualcomm_products | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2017-8254: Sound driver
vendor_android·2017-07-01·CVSS 5.5
CVE-2017-8254 [MEDIUM] CVE-2017-8254: Sound driver
Android Security Bulletin 2017-07-01
CVE: CVE-2017-8254
Severity: MEDIUM
Type: ID
Component: Sound driver
References: A-36252027
QC-CR#832914
GHSA
GHSA-f79w-3mc4-xqgc: In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is
ghsa_unreviewed·2022-05-17
CVE-2017-8254 [MEDIUM] CWE-200 GHSA-f79w-3mc4-xqgc: In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is
In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-08-18
Published