Skip to content
OpenAdvisories
Unscored CVE-2018-11293 EUVD-2018-3333GHSA-4qj4-c4xr-7m2w

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handle…

Published Sep 18, 2018 · Updated Aug 5, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Android for MSM, Firefox OS for MSM, QRD Android Platform: Android Category: Browsers

Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler, ndp_cfg len and num_ndp_app_info is from fw. If they are not checked, it may cause buffer over-read once the value is too large.

Affected products

VendorProductAffectedFixed
Qualcomm Android for MSM, Firefox OS for MSM, QRD Android All Android releases from CAF using the Linux kernel —

References