CVE-2017-9681: vulnerability in Qualcomm, Inc. Android for MSM, Firefox OS for…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.4%
In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel memory address is passed from userspace through iris_vidioc_s_ext_ctrls ioctl, it will print kernel address data. A user could set it to an arbitrary kernel address, hence information disclosure (for kernel) could occur.
Affected products
Qualcomm, Inc. · Android for MSM, Firefox OS for MSM, QRD AndroidRelated CVEs — Qualcomm, Inc. Android for MSM, Firefox OS for…
In the same product, most dangerous first.