Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2017-9678: Google Android video driver may corrupt memory
CVE-2017-9678 · published 9 years ago
Summary
The video driver used in Android on Qualcomm devices can write outside its allocated memory because a copy routine lacks proper size checks. This can lead to system crashes or enable malicious code execution. Apply the latest Android updates or vendor patches to fix the driver.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| android |
All versions
cpe:2.3:o:google:android:*:*:*:*:*:*:*:* |
Original advisory text
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy().
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy().
References
- https://source.android.com/security/bulletin/2017-08-01 Patch Vendor Advisory
- http://www.securityfocus.com/bid/100213 Third Party Advisory VDB Entry
- https://source.android.com/security/bulletin/2017-06-01 Patch Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-119Buffer Overflow
Timeline
Published18 Aug 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-9678 · NVD
Track software like this
Free during beta