CVE-2017-17770
Last modified
CVE-2017-17770 is a vulnerability of currently unknown severity. In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur.. EPSS estimates a 0.44% chance of exploitation in the next 30 days.
Description
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | All versions |
References
- https://source.android.com/security/bulletin/2018-04-01Vendor Advisory
- https://source.android.com/security/bulletin/2018-04-01Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-17770?
How severe is CVE-2017-17770?
How do I fix CVE-2017-17770?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-17763SuperBeam through 4.1.3, when using the LAN or WiFi Direct S…7.5
- CVE-2017-17764In all Qualcomm products with Android releases from CAF usin…
- CVE-2017-17765In all Qualcomm products with Android releases from CAF usin…
- CVE-2017-17766In wma_peer_info_event_handler() in Android for MSM, Firefox…
- CVE-2017-17767In all Qualcomm products with Android releases from CAF usin…
- CVE-2017-17769Information leakage in Android for MSM, Firefox OS for MSM, …
- CVE-2017-17771In msm_isp_prepare_v4l2_buf in Android for MSM, Firefox OS f…
- CVE-2017-17772In multiple functions that process 802.11 frames, out-of-bou…9.8
- CVE-2017-17773In Snapdragon Automobile, Snapdragon Wearable and Snapdragon…
- CVE-2017-17774admin/configuration.php in Piwigo 2.9.2 has CSRF.
- CVE-2017-17775Piwigo 2.9.2 has XSS via the name parameter in an admin.php?…
- CVE-2017-17776Paid To Read Script 2.0.5 has full path disclosure via an in…
Are you affected by CVE-2017-17770?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST