CVE-2017-15861

CVE-2017-15861 is a high-severity vulnerability affecting Qualcomm products running Android with the Linux kernel, specifically within the wma_roam_synch_event_handler function. It involves an array out-of-bounds access due to unvalidated firmware input for vdev_id, leading to potential compromise of confidentiality, integrity, and availability. The attack requires local access with low complexity, but there is no evidence of active exploitation, public exploit code, or significant community discussion.