Buffer Overwrite Vulnerability in Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android

Buffer Overwrite Vulnerability in Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android

CVE-2017-14890 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in the processing of an SWBA event, the vdev_map value is not properly validated leading to a potential buffer overwrite in function wma_send_bcn_buf_ll().

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.