Description
In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Qualcomm, Inc. All Qualcomm products
All Android releases from CAF using the Linux kernelaffected
References
- https://source.android.com/security/bulletin/2017-05-01 ↗
- http://www.securityfocus.com/bid/98178 ↗
- https://www.codeaurora.org/detection-error-condition-without-proper-action-msmds2dapparamvisualizercontrolget-cve-2016-5853 ↗
- https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=a8f3b894de319718aecfc2ce9c691514696805be ↗