CVE-2017-9725 Integer overflow in n/a
An integer overflow in DMA allocation size calculation allows allocations to succeed when they should fail, potentially leading to memory corruption or undefined behavior.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2017-9725?
CVE-2017-9725 is a high-severity vulnerability in Google Android, published on 21 Sep 2017. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
Weakness: CWE-682
Which versions are affected by CVE-2017-9725?
It affects 1 product.
Products include Google Android.
How do I fix CVE-2017-9725?
Apply the vendor's patch.
Is CVE-2017-9725 being exploited?
There is no known exploitation of CVE-2017-9725 in the wild and no public exploit code.
Other vulnerabilities in Google Android
Sources
Also known as DEBIAN-CVE-2017-9725, GHSA-m96m-qc9m-gfxj, UBUNTU-CVE-2017-9725.