CVE-2017-15851

Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel

Score

CVSS 3.0 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2018-07-06

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Android (Google)
• Android For Msm (Qualcomm Inc.)
• Firefox Os For Msm (Qualcomm Inc.)
• Qrd Android (Qualcomm Inc.)

References

• https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components
• https://www.vulnerabilitycenter.com/#%21vul=87351