CVE-2017-8257: Google Android

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use.

Affected products

• Google Android: any version

Published 2017-08-18. Last modified 2026-06-17.