CVE-2017-7364

State: Published
Severity: Not scored
Published: Aug 18, 2017
Updated: Sep 17, 2024
Reserved: Mar 31, 2017

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
All Qualcomm productsQualcomm, Inc.	All Android releases from CAF using the Linux kernelAffected

References

https://source.android.com/security/bulletin/2017-06-01
1038623vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.