High severity7.5NVD Advisory· Published Mar 30, 2018· Updated Jun 17, 2026

CVE-2017-14875

Description

In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a heap overread vulnerability exists.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Android for MSMllm-create
Range: <2017-05-23
Mozilla Corporation/Firefox for iOSllm-fuzzy
Range: <2017-05-23
Qualcomm/QRD Androidllm-fuzzy
Range: <2017-05-23
Qualcomm, Inc./Android for MSM, Firefox OS for MSM, QRD Androidv5
Range: All Android releases from CAF using the Linux kernel

Patches

Vulnerability mechanics

References

source.codeaurora.org/quic/la/kernel/msm-4.4/commit/nvdPatchThird Party Advisory
source.android.com/security/bulletin/pixel/2018-02-01nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000