VDB
CVE-2017-9698
CVE-2017-9698
PUBLISHED
Reported by qualcomm · Published December 5, 2017
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improperly specified offset/size values for a submission command could cause a math operation to overflow and could result in an access to arbitrary memory. The combined pointer will overflow and possibly pass further checks intended to avoid accessing unintended memory.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm, Inc. | Android for MSM, Firefox OS for MSM, QRD Android | All Android releases from CAF using the Linux kernel |
| Qualcomm, Inc. | Android for MSM, Firefox OS for MSM, QRD Android | * |
Timeline
- Dec 5, 2017 CVE Published
- Apr 14, 2021 EPSS Score (30 in total, the first dated here)
- Apr 6, 2026 Security Advisory
- Jun 17, 2026 CVE Updated
- Sep 27, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2017-9698
vulnetix vdb fixes CVE-2017-9698Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2017-9698/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart