CVE-2017-9677: In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl...

Security readout for executives and security teams

CVE-2017-9677 is a Qualcomm Android kernel issue where two threads can change the same audio compression parameter without proper locking. Under the described condition, a large value can trigger a buffer overflow. Business urgency depends on whether deployed Android devices use Qualcomm CAF-derived kernels and still lack vendor updates. Exposure is most likely in Android devices or firmware builds based on Qualcomm CAF Linux kernel releases. The provided bundle does not identify specific device models, Android versions, package names, or CPEs, so asset mapping must use OEM firmware and kernel provenance. Treat this as a targeted legacy Android platform risk rather than an internet-wide emergency. Prioritize confirmation for managed Qualcomm Android fleets, especially unsupported devices, because the available sources do not provide severity, exploit evidence, or complete affected-product detail. Mitigation focus: Check Android, Qualcomm, and OEM guidance for CVE-2017-9677 before applying changes.; Prioritize vendor-supported Android or kernel updates for affected Qualcomm CAF-derived devices.; Retire or replace devices that cannot receive relevant OEM firmware updates..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.