Skip to content
OpenAdvisories
Unscored CVE-2018-5850 EUVD-2018-17617GHSA-mwvq-qcgp-8m94

In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffe…

Published Jun 6, 2018 · Updated Sep 16, 2024 · Assigned by qualcomm

Description

In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Affected products

VendorProductAffectedFixed
Qualcomm Android for MSM, Firefox OS for MSM, QRD Android All Android releases from CAF using the Linux kernel —

References