CVE-2017-9676
published 2017-09-21CVE-2017-9676: In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing…
PriorityP419medium4.7CVSS 3.0
AVLACHPRNUIRSUCHINAN
EPSS
0.27%
19.6th percentile
In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing global static variables without using a lock.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 8.0 | — | |
| android | — | — |
CVSS provenance
nvdv3.04.7MEDIUMCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hhc9-m6jq-c9w7: In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when
ghsa_unreviewed·2022-05-17
CVE-2017-9676 [MEDIUM] CWE-200 GHSA-hhc9-m6jq-c9w7: In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when
In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing global static variables without using a lock.
Android
CVE-2017-9676: File system
vendor_android·2017-09-01·CVSS 4.7
CVE-2017-9676 [MEDIUM] CVE-2017-9676: File system
Android Security Bulletin 2017-09-01
CVE: CVE-2017-9676
Severity: MEDIUM
Type: ID
Component: File system
References: A-62378596
QC-CR#2016517
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-09-21
Published