Critical severity9.8NVD Advisory· Published Mar 30, 2018· Updated Jun 17, 2026

CVE-2017-14877

Description

While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory. If one thread sends an ioctl cmd IPA_IOC_QUERY_RT_TBL_INDEX while another sends an ioctl cmd IPA_IOC_DEL_RT_RULE, a use-after-free condition may occur.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Androidllm-create
Range: <2017-08-31
Mozilla Corporation/Firefoxllm-fuzzy
Range: <2017-08-31
Qualcomm, Inc./Android for MSM, Firefox OS for MSM, QRD Androidv5
Range: All Android releases from CAF using the Linux kernel

Patches

Vulnerability mechanics

References

source.codeaurora.org/quic/la/kernel/msm-3.10/commit/nvdPatchThird Party Advisory
source.android.com/security/bulletin/pixel/2018-02-01nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000