Security Advisory

CVE-2017-14877

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-03-30 21:00:00

Last updated 2024-09-16 19:09:13

Assigner qualcomm

State PUBLISHED

Description

While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory. If one thread sends an ioctl cmd IPA_IOC_QUERY_RT_TBL_INDEX while another sends an ioctl cmd IPA_IOC_DEL_RT_RULE, a use-after-free condition may occur.

← Browse all CVEs View on cve.org ↗