CVE-2017-14915 In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition.
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm sd 625 firmware | All versions | No fix listed |
| qualcomm sd 650 firmware | All versions | No fix listed |
| qualcomm sd 652 firmware | All versions | No fix listed |
| qualcomm sd 835 firmware | All versions | No fix listed |
| qualcomm Snapdragon Mobile | = SD 625, SD 650/52, SD 835 | No fix listed |
References
- 102386 third-party-advisory vdb-entry
- 1040106 third-party-advisory vdb-entry
- source.android.com vendor-advisory