CVE-2017-18058

Name of the Vulnerable Software and Affected Versions: Android for MSM versions (affected versions not specified) Firefox OS for MSM versions (affected versions not specified) QRD Android versions (affected versions not specified)

Description: The issue is related to improper input validation for wow buf pkt len in wma wow wakeup host event(), which is received from firmware, leading to a potential out of bounds memory read. This affects Android releases from CAF using the Linux kernel.

Recommendations: For Android for MSM, update to a version that includes input validation for wow buf pkt len in wma wow wakeup host event(). For Firefox OS for MSM, update to a version that includes input validation for wow buf pkt len in wma wow wakeup host event(). For QRD Android, update to a version that includes input validation for wow buf pkt len in wma wow wakeup host event().