Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-17764

In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_hand

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_handler() so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Android for MSM, Firefox OS for MSM, QRD Android

  • All Android releases from CAF using the Linux kernelaffected

References