In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio channels coming from firmware is not properly validated, potentially leading to an integer overflow vulnerability followed by a buffer overflow.
References
Link | Resource |
---|---|
https://source.android.com/security/bulletin/2018-02-01 | Vendor Advisory |
Configurations
Information
Published : 2018-02-23 15:29
Updated : 2018-03-12 09:48
NVD link : CVE-2017-15862
Mitre link : CVE-2017-15862
JSON object : View
CWE
CWE-190
Integer Overflow or Wraparound
Products Affected
- android