CVE-2018-11302

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description The issue is related to a lack of input validation from userspace before copying data into a buffer, potentially leading to an array overflow in the WLAN component of the Linux kernel used in Android releases.

Recommendations For Android for MSM, update to a version that includes input validation checks for userspace data to prevent array overflows in WLAN. For Firefox OS for MSM, consider implementing input validation for data received from userspace to mitigate the risk of array overflows in WLAN until a fixed version is available. For QRD Android, restrict access to the WLAN component to minimize the risk of exploitation due to array overflows until a patch or update with proper input validation is released.