1. Home
  2. CVE Database
  3. CVE-2017-9724
HIGH · 7.8

CVE-2017-9724

In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writi...

Vulnerability Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writing to a user supplied address.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
GoogleAndroid<= 8.0

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2017-9724?

CVE-2017-9724 is a vulnerability with a CVSS score of 7.8 (HIGH). In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writi...

How severe is CVE-2017-9724?

CVE-2017-9724 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-9724?

Check the references section above for vendor advisories and patch information. Affected products include: Google Android.