CVE-2017-14876

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to 2017-06-21 Firefox OS for MSM versions prior to 2017-06-21 QRD Android versions prior to 2017-06-21

Description: The issue arises from the lack of bounds checking on the params->entries[i].vfe intf parameter in the msm ispif config stereo() function, which comes from userspace. This could potentially result in a kernel out-of-bounds write.

Recommendations: For Android for MSM versions prior to 2017-06-21, update to a version released after 2017-06-21 to resolve the issue. For Firefox OS for MSM versions prior to 2017-06-21, update to a version released after 2017-06-21 to resolve the issue. For QRD Android versions prior to 2017-06-21, update to a version released after 2017-06-21 to resolve the issue.