CVE-2017-15857

EPSS 0.02%
Veröffentlicht 12.06.2018 20:29:00
Zuletzt bearbeitet 21.11.2024 03:15:20
Quelle product-security@qualcomm.com
CVE-Watchlists
Login
Unerledigt
Login

In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.025

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://source.android.com/security/bulletin/pixel/2018-05-01

Third Party Advisory

https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2

Patch

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-15857

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-15857

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-15857

EUVD