CVE-2017-15856

Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

• CWE-362
• CWE-415

• https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-componentsPatch, Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=ed02c0ccd6f7461a69d64903738372eaf21babcdPatch
• https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletinPatch, Third Party Advisory
• https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-componentsPatch, Vendor Advisory
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=ed02c0ccd6f7461a69d64903738372eaf21babcdPatch
• https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletinPatch, Third Party Advisory

Published

Jul 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15850In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-15851Lack of copy_from_user and information leak in function "msm…
• CVE-2017-15852Information leak of the ISPIF base address in Android for MS…
• CVE-2017-15853In Qualcomm Android for MSM, Firefox OS for MSM, and QRD And…
• CVE-2017-15854The value of fix_param->num_chans is received from firmware …
• CVE-2017-15855In Qualcomm Android for MSM, Firefox OS for MSM, and QRD And…
• CVE-2017-15857In the camera driver, an out-of-bounds access can occur due …
• CVE-2017-15859While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_S…
• CVE-2017-15860In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-15861In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-15862In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-15863Cross Site Scripting (XSS) exists in the wp-noexternallinks …