CVE-2017-8277

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msmdbaregisterclient, if the client registers failed, it would be freed. However the client was not removed from list. Use-after-free would occur when traversing the list next time...

CVE-2017-8277

In CVE-2017-8277, Qualcomm products running Android CAF builds on the Linux kernel are affected. The issue occurs in the function msm_dba_register_client: if a client’s registration fails, the object is freed but not removed from the list, enabling a use-after-free when the list is traversed next...