Description (CNA)
In wma_peer_info_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-03, the value of num_peers received from firmware is not properly validated so that an integer overflow vulnerability in the size of a buffer allocation may potentially lead to a buffer overflow.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Qualcomm, Inc. / Android for MSM, Firefox OS for MSM, QRD Android | affected All Android releases from CAF using the Linux kernel |
CWE
No CWE identifiers supplied.
References
- https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a37d8a78f5bd0e9a2c91de46721a6d80bd229a43
- https://source.android.com/security/bulletin/pixel/2018-02-01
ADP enrichment
No English description supplied.