Vulnerabilities > CVE-2017-9720 - Off-by-one Error vulnerability in Google Android

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

google

CWE-193

NVD

Published: 2017-09-21

Updated: 2019-10-03

Summary

In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can occur.

Vulnerable Configurations

Part	Description	Count
OS	Google Google Android - Google Android 1.0 Google Android 1.1 Google Android 1.5 Google Android 1.6 Google Android 2.0 Google Android 2.0.1 Google Android 2.1 Google Android 2.2 Google Android 2.2.1 Google Android 2.2.2 Google Android 2.2.3 Google Android 2.3 Google Android 2.3.1 Google Android 2.3.2 Google Android 2.3.3 Google Android 2.3.4 Google Android 2.3.5 Google Android 2.3.6 Google Android 2.3.7 Google Android 3.0 Google Android 3.1 Google Android 3.2 Google Android 3.2.1 Google Android 3.2.2 Google Android 3.2.4 Google Android 3.2.6 Google Android 4.0 Google Android 4.0.1 Google Android 4.0.2 Google Android 4.0.3 Google Android 4.0.4 Google Android 4.1 Google Android 4.1.1 Google Android 4.1.2 Google Android 4.2 Google Android 4.2.1 Google Android 4.2.2 Google Android 4.3 Google Android 4.3.1 Google Android 4.4 Google Android 4.4.1 Google Android 4.4.2 Google Android 4.4.3 Google Android 4.4.4 Google Android 5.0 Google Android 5.0.1 Google Android 5.0.2 Google Android 5.1 Google Android 5.1.0 Google Android 5.1.1 Google Android 6.0 Google Android 6.0.1 Google Android 7.0 Google Android 7.1.0 Google Android 7.1.1 Google Android 7.1.2 Google Android 8.0	60

Common Weakness Enumeration (CWE)

CWE-193 - Off-by-one Error

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References