Description
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing start bss request from upper layer, out of bounds read occurs if ssid length is greater than maximum.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Qualcomm | Android for MSM, Firefox OS for MSM, QRD Android | All Android releases from CAF using the Linux kernel | — |
References
- https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
- https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=dc657f502adb3038784b7488d2f183ed31b6aac3
- https://source.android.com/security/bulletin/2018-09-01#qualcomm-components