https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:24:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2017-01956 bdu:2017-01956 https://cve.radiocsirt.org/vuln/bdu:2017-01956 https://cve.radiocsirt.org/vuln/certfr-2017-avi-167 certfr-2017-avi-167 https://cve.radiocsirt.org/vuln/certfr-2017-avi-167 https://cve.radiocsirt.org/vuln/cnvd-2017-11371 cnvd-2017-11371 https://cve.radiocsirt.org/vuln/cnvd-2017-11371 https://cve.radiocsirt.org/vuln/euvd-2026-185212 EUVD-2026-185212 https://cve.radiocsirt.org/vuln/euvd-2026-185212 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7364 <p>In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.</p> <p>In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7364 https://cve.radiocsirt.org/vuln/ghsa-9gvm-96mj-8h5r <p>In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.</p> <p>In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.</p> https://cve.radiocsirt.org/vuln/ghsa-9gvm-96mj-8h5r https://cve.radiocsirt.org/vuln/gsd-2017-7364 gsd-2017-7364 https://cve.radiocsirt.org/vuln/gsd-2017-7364