Skip to content
OpenAdvisories
Unscored CVE-2018-5897 EUVD-2018-17664GHSA-r3q4-wc3p-2gx3

While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly i…

Published Jul 6, 2018 · Updated Sep 16, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Android for MSM, Firefox OS for MSM, QRD Android Platform: Android Category: Browsers

Description

While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Affected products

VendorProductAffectedFixed
Qualcomm Android for MSM, Firefox OS for MSM, QRD Android All Android releases from CAF using the Linux kernel —

References