CVE-2017-8256 Vulnerability Details

  /     /     /  

CVE-2017-8256 Metadata Quick Info

CVE Published: 18/08/2017 | CVE Updated: 17/09/2024 | CVE Year: 2017
Source: qualcomm | Vendor: Qualcomm, Inc. | Product: All Qualcomm products
Status : PUBLISHED

---

CVE-2017-8256 Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Improper Input Validation in WLAN
Source: Qualcomm, Inc.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).