Skip to content
OpenAdvisories
Unscored CVE-2018-11295 EUVD-2018-3335GHSA-3vgf-g632-59mj

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WMA handler carries a fixed eve…

Published Sep 18, 2018 · Updated Aug 5, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Android for MSM, Firefox OS for MSM, QRD Android Platform: Android Category: Browsers

Description

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WMA handler carries a fixed event data from the firmware to the host . If the length and anqp length from this event data exceeds the max length, an OOB write would happen.

Affected products

VendorProductAffectedFixed
Qualcomm Android for MSM, Firefox OS for MSM, QRD Android All Android releases from CAF using the Linux kernel —

References