Description
In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, then an out-of-bounds read occurs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Qualcomm | All Qualcomm products | Android for MSM, Firefox OS for MSM, QRD Android | — |