Skip to content
Not rated

CVE-2018-5836 In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM,…

Description

In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the data_len value is received from firmware and not properly validated which could potentially lead to an out-of-bounds access.

Affected products and versions

Product Affected versions Fixed in
Android for MSM, Firefox OS for MSM, QRD Android Versions not published

References

Timeline

  1. Published
  2. Last modified
The 306 CVEs of Android for MSM, Firefox OS for MSM, QRD Android →
Track this CVE