Skip to content
Not rated

CVE-2018-5850 In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow…

Description

In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Affected products and versions

Product Affected versions Fixed in
Android for MSM, Firefox OS for MSM, QRD Android Versions not published

References

Timeline

  1. Published
  2. Last modified
The 306 CVEs of Android for MSM, Firefox OS for MSM, QRD Android →
Track this CVE