Not rated
CVE-2018-11298 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while…
Description
In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing SET_PASSPOINT_LIST vendor command HDD does not make sure that the realm string that gets passed by upper-layer is NULL terminated. This may lead to buffer overflow as strlen is used to get realm string length to construct the PASSPOINT WMA command.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Android for MSM, Firefox OS for MSM, QRD Android | Versions not published |
References
- www.codeaurora.org www.codeaurora.org
- source.codeaurora.org source.codeaurora.org
- source.android.com source.android.com
Timeline
- Published
- Last modified
Other CVEs of Android for MSM, Firefox OS for MSM, QRD Android
The 306 CVEs of Android for MSM, Firefox OS for MSM, QRD Android →
CVE-2018-12011
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized…
Not rated
CVE-2018-12006
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Users with no…
Not rated
CVE-2018-13893
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of…
Not rated
CVE-2018-12010
In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of…
Not rated