Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-9687

Опубликовано: 10 окт. 2017
Источник: nvd
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, two concurrent threads/processes can write the value of "0" to the debugfs file that controls ipa ipc log which will lead to the double-free in ipc_log_context_destroy(). Another issue is the Use-After-Free which can happen due to the race condition when the ipc log is deallocated via the debugfs call during a log print.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 5%
0.00022
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 7.8
github
больше 3 лет назад

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, two concurrent threads/processes can write the value of "0" to the debugfs file that controls ipa ipc log which will lead to the double-free in ipc_log_context_destroy(). Another issue is the Use-After-Free which can happen due to the race condition when the ipc log is deallocated via the debugfs call during a log print.

EPSS

Процентиль: 5%
0.00022
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-415