CVE-2017-15851

CVE-2017-15851 describes an information leak and lack of proper input validation (copy_from_user) within the msm_ois_subdev_do_ioctl function in the msm_ois.c file of the Linux kernel. This flaw primarily affects Android for MSM, Firefox OS for MSM, and QRD Android releases from CAF, potentially leading to a camera crash. Rated 7.8 HIGH, this vulnerability has a local attack vector with low attack complexity, requiring low privileges and no user interaction. A successful exploit could result in high confidentiality, integrity, and availability impacts, including information disclosure and system instability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE has garnered minimal community discussion and media coverage, suggesting a low profile in the threat landscape.