CVE-2017-8246

In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream->runtime->private_data. Later, prtd is freed. However, prtd is not sanitized and set to NULL, resulting in a dangling pointer. There are other functions that access the same memory (substream->runtime->private_data) with a NULL check, such as msm_pcm_volume_ctl_put(), which means this freed memory could be used.

• CWE-416

• https://source.android.com/security/bulletin/2017-07-01Vendor Advisory
• https://www.codeaurora.org/use-after-free-alsa-pcm-playback-kernel-module-cve-2017-8246Broken Link
• https://source.android.com/security/bulletin/2017-07-01Vendor Advisory
• https://www.codeaurora.org/use-after-free-alsa-pcm-playback-kernel-module-cve-2017-8246Broken Link

Published

May 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8240In all Android releases from CAF using the Linux kernel, a k…
• CVE-2017-8241In all Android releases from CAF using the Linux kernel, a b…
• CVE-2017-8242In all Android releases from CAF using the Linux kernel, a r…
• CVE-2017-8243A buffer overflow can occur in all Qualcomm products with An…
• CVE-2017-8244In core_info_read and inst_info_read in all Android releases…7
• CVE-2017-8245In all Android releases from CAF using the Linux kernel, whi…7.8
• CVE-2017-8247In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-8248A buffer overflow may occur in the processing of a downlink …
• CVE-2017-8249Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-8250In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-8251In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-8252Kernel can inject faults in computations during the executio…