Skip to content
OpenAdvisories
Unscored CVE-2017-15831 EUVD-2017-7253GHSA-24xx-h3r4-557m

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_ndp_end…

Published Mar 16, 2018 · Updated Sep 17, 2024 · Assigned by qualcomm

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function wma_ndp_end_indication_event_handler(), there is no input validation check on a event_info value coming from firmware, which can cause an integer overflow and then leads to potential heap overwrite.

References