Integer Overflow Vulnerability in qbt1000 ioctl Handler: Potential Buffer Overflow

CVE-2017-9690 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a qbt1000 ioctl handler, an incorrect buffer size check has an integer overflow vulnerability potentially leading to a buffer overflow.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.