CVE-2017-0404

CVE-2017-0404 is an elevation-of-privilege vulnerability in the Android kernel sound subsystem that could allow a local malicious application to execute arbitrary code in kernel context. Affected products/versions include Android devices using kernel 3.10 and 3.18. The issue requires compromising...

CVE-2017-0404

An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

kernel: sound: a race condition in the kernel sound timer in snd_timer_user_read()

A race condition was found in the Linux kernel's sound timer code in the sndtimeruserread function in the sound/core/timer.c file. An unprivileged attacker can exploit the race condition to cause an out-of-bound access which may lead to a system crash or other unspecified impact. Due to the natur...