CVE-2017-9677

CVE-2017-9677 is a race condition vulnerability affecting Qualcomm products with Android releases using the Linux kernel. Specifically, the msm_compr_ioctl_shared function's "ddp->params_length" variable lacks proper locking, allowing multiple threads to modify it concurrently. This can lead to a buffer overflow if a large value is set, potentially resulting in high impact to confidentiality, integrity, and availability. With a CVSS score of 7.8 (High), this vulnerability requires user interaction (UI:R) but has low attack complexity (AC:L) and no required privileges (PR:N). There is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage for this CVE.