CVE-2017-9693

The length of attribute value for STA_EXT_CAPABILITY in __wlan_hdd_change_station in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-06 being less than the actual lenth of StaParams.extn_capability results in a read for extra bytes when a memcpy is done from params->ext_capab to StaParams.extn_capability using the sizeof(StaParams.extn_capability).

• CWE-119

• http://www.securityfocus.com/bid/100210Third Party Advisory, VDB Entry
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=05a5abb21e4d97001f77d344444a3ec2f9c275f9Patch, Third Party Advisory
• https://www.codeaurora.org/security-bulletin/2017/10/20/october-2017-v1Third Party Advisory
• http://www.securityfocus.com/bid/100210Third Party Advisory, VDB Entry
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=05a5abb21e4d97001f77d344444a3ec2f9c275f9Patch, Third Party Advisory
• https://www.codeaurora.org/security-bulletin/2017/10/20/october-2017-v1Third Party Advisory

Published

Mar 30, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9687In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-9688Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-9689In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-9690In android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-9691There is a race condition in Android for MSM, Firefox OS for…
• CVE-2017-9692When an atomic commit is issued on a writeback panel with a …
• CVE-2017-9694While parsing Netlink attributes in QCA_WLAN_VENDOR_ATTR_EXT…
• CVE-2017-9696In android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-9697In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-9698In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-9700In Android for MSM, Firefox OS for MSM, QRD Android, with al…
• CVE-2017-9701In android for MSM, Firefox OS for MSM, QRD Android, with al…