CVE-2017-17766
CVE-2017-17766
9.8
CriticalPublished:
Last updated:
Source:product-security@qualcomm.com
Modified
Weakness (CWE)
CVSS Vector
v3.0- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Description
In wma_peer_info_event_handler() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-03, the value of num_peers received from firmware is not properly validated so that an integer overflow vulnerability in the size of a buffer allocation may potentially lead to a buffer overflow.
References
product-security@qualcomm.com
https://source.android.com/security/bulletin/pixel/2018-02-01product-security@qualcomm.com
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a37d8a78f5bd0e9a2c91de46721a6d80bd229a43af854a3a-2127-422b-91ae-364da2661108
https://source.android.com/security/bulletin/pixel/2018-02-01af854a3a-2127-422b-91ae-364da2661108
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a37d8a78f5bd0e9a2c91de46721a6d80bd229a43