CVE-2017-10999 is a memory corruption vulnerability affecting Qualcomm products running Android releases from CAF using the Linux kernel. Specifically, concurrent calls to the ioctl RMNET_IOCTL_ADD_MUX_CHANNEL function in the ipa wan driver can lead to memory corruption due to missing locks. This high-severity vulnerability (CVSS 7.8) requires local access and user interaction (e.g., installing a malicious app) but can result in high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 8.0CPE matchmatch criteria | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.