CVE-2017-15855

CVE-2017-15855 describes a kernel buffer overflow vulnerability in Qualcomm Android, Firefox OS for MSM, and QRD Android devices running Linux kernels prior to the 2018-04-05 security patch level. The camera application's CPP module driver directly accesses user-provided buffers and uses an unchecked userspace value for copying, leading to the overflow. This vulnerability has a CVSS v3 score of 7.8 (High), indicating that a local attacker could achieve high impact on confidentiality, integrity, and availability with low attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.