CVE-2017-9691 | Vulnetix

CVE-2017-9691 PUBLISHED

Reported by qualcomm · Published March 30, 2018

There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicore driver.

Affected products

Vendor	Product	Versions
Qualcomm, Inc.	Android for MSM, Firefox OS for MSM, QRD Android	All Android releases from CAF using the Linux kernel
Qualcomm, Inc.	Android for MSM, Firefox OS for MSM, QRD Android	*

Timeline

Aug 8, 2017 CVE Published
Apr 14, 2021 EPSS Score (30 in total, the first dated here)
Jun 1, 2026 Security Advisory
Jun 17, 2026 CVE Updated
Sep 27, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2017-9691
vulnetix vdb fixes CVE-2017-9691

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2017-9691/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

100213 vdb-entryx_refsource_BID
x_refsource_MISC

Look up in the Resolve Platform →