Skip to content
OpenAdvisories
Unscored CVE-2017-15861 EUVD-2017-7283GHSA-xjj8-r7cf-g6w9

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is re…

Published Feb 23, 2018 · Updated Sep 16, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Android for MSM, Firefox OS for MSM, QRD Android Platform: Android Category: Browsers

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation.

Affected products

VendorProductAffectedFixed
Qualcomm Android for MSM, Firefox OS for MSM, QRD Android All Android releases from CAF using the Linux kernel —

References