Skip to content
Not rated

CVE-2017-14876 In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter…

Description

In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf comes from userspace without any bounds check which could potentially result in a kernel out-of-bounds write.

Affected products and versions

Product Affected versions Fixed in
Android for MSM, Firefox OS for MSM, QRD Android Versions not published

References

Timeline

  1. Published
  2. Last modified
The 306 CVEs of Android for MSM, Firefox OS for MSM, QRD Android →
Track this CVE