Unscored CVE-2017-15859 EUVD-2017-7281GHSA-rvpq-468x-qvhx

While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SC…

Published Mar 30, 2018 · Updated Sep 17, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Android for MSM, Firefox OS for MSM, QRD Android Platform: Android Category: Browsers

Description

While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCALE_DECR_DB contains fewer than 1 byte, in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-11 a buffer overrun occurs.

Affected products

Vendor	Product	Affected	Fixed
Qualcomm	Android for MSM, Firefox OS for MSM, QRD Android	All Android releases from CAF using the Linux kernel	—

References

https://source.android.com/security/bulletin/pixel/2018-02-01
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=88dcc44ea8fbe158d1dee3ea197e47794bf4449d