Vulnerabilities > CVE-2017-7371 - Use After Free vulnerability in Google Android

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
google
CWE-416
critical

Summary

In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth.

Vulnerable Configurations

Part Description Count
OS
Google
1

Common Weakness Enumeration (CWE)