Skip to content
OpenAdvisories
Unscored CVE-2017-14896 EUVD-2017-6374GHSA-pr67-q8c4-443v

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a memory allocatio…

Published Dec 5, 2017 · Updated Sep 17, 2024 · Assigned by qualcomm

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a memory allocation without a length field validation in the mobicore driver which can result in an undersize buffer allocation. Ultimately this can result in a kernel memory overwrite.

Affected products

VendorProductAffectedFixed
Qualcomm Android for MSM, Firefox OS for MSM, QRD Android All Android releases from CAF using the Linux kernel —

References