Description
In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate offsets and sizes for copy operations, which could result in heap overflow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Qualcomm | All Qualcomm products | Android for MSM, Firefox OS for MSM, QRD Android | — |