CVE-2017-8244

In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_buf->curr" and "dbg_buf->filled_size" could be modified by different threads at the same time, but they are not protected with mutex or locks. Buffer overflow is possible on race conditions. "buffer->curr" itself could also be overwritten, which means that it may point to anywhere of kernel memory (for write).

• CWE-362

• http://www.securityfocus.com/bid/98547Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/pixel/2017-12-01Vendor Advisory
• https://www.codeaurora.org/buffer-overflow-msmvidc-debugfs-driver-coreinforead-and-instinforead-cve-2017-8244Broken Link
• http://www.securityfocus.com/bid/98547Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/pixel/2017-12-01Vendor Advisory
• https://www.codeaurora.org/buffer-overflow-msmvidc-debugfs-driver-coreinforead-and-instinforead-cve-2017-8244Broken Link

Published

May 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8238In all Android releases from CAF using the Linux kernel, a b…
• CVE-2017-8239In all Android releases from CAF using the Linux kernel, use…
• CVE-2017-8240In all Android releases from CAF using the Linux kernel, a k…
• CVE-2017-8241In all Android releases from CAF using the Linux kernel, a b…
• CVE-2017-8242In all Android releases from CAF using the Linux kernel, a r…
• CVE-2017-8243A buffer overflow can occur in all Qualcomm products with An…
• CVE-2017-8245In all Android releases from CAF using the Linux kernel, whi…7.8
• CVE-2017-8246In function msm_pcm_playback_close() in all Android releases…7.8
• CVE-2017-8247In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-8248A buffer overflow may occur in the processing of a downlink …
• CVE-2017-8249Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-8250In all Qualcomm products with Android releases from CAF usin…