CVE-2017-15853
Last modified
CVE-2017-15853 is a vulnerability of currently unknown severity. In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, ptt_sock_send_msg_to_app() is invoked without validating the packet length. If the packet length is invalid, then a buffer over-read can occur.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, ptt_sock_send_msg_to_app() is invoked without validating the packet length. If the packet length is invalid, then a buffer over-read can occur.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-15853?
How severe is CVE-2017-15853?
How do I fix CVE-2017-15853?
Are you affected by CVE-2017-15853?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST