CVE-2017-9681

CVE-2017-9681 is an information disclosure vulnerability affecting Android devices with Qualcomm MSM chipsets and CAF Android releases using the Linux kernel, specifically before the 2017-08-05 security patch. A low-privileged attacker can exploit a flaw in the iris_vidioc_s_ext_ctrls ioctl to print kernel memory address data, leading to the disclosure of sensitive kernel information. Rated 6.5 Medium on the CVSS scale, this vulnerability has a network attack vector and low attack complexity, with a high impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.