Description
Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Qualcomm | Android for MSM, Firefox OS for MSM, QRD Android | All Android releases from CAF using the Linux kernel | — |