CVE-2017-8260
published 2017-08-18CVE-2017-8260: In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out…
PriorityP434high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
0.53%
41.3th percentile
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| qualcomm_inc | all_qualcomm_products | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-chh2-2gx3-j9g5: In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cau
ghsa_unreviewed·2022-05-14
CVE-2017-8260 [HIGH] CWE-20 GHSA-chh2-2gx3-j9g5: In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cau
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an out of bounds write later.
Android
CVE-2017-8260: Camera driver
vendor_android·2017-07-01·CVSS 7.8
CVE-2017-8260 [HIGH] CVE-2017-8260: Camera driver
Android Security Bulletin 2017-07-01
CVE: CVE-2017-8260
Severity: MEDIUM
Type: EoP
Component: Camera driver
References: A-34624155
QC-CR#2008469
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/99465https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/blob/master/CVE-2017-8260.chttps://source.android.com/security/bulletin/2017-07-01http://www.securityfocus.com/bid/99465https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/blob/master/CVE-2017-8260.chttps://source.android.com/security/bulletin/2017-07-01
2017-08-18
Published