CVE-2018-11304

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Firefox OS for MSM versions prior to the fixed version QRD Android versions prior to the fixed version

Description The issue is related to a possible buffer overflow in the msm adsp stream callback put function due to insufficient input validation of user-provided data, leading to an integer overflow. This affects all Android releases from CAF using the Linux kernel.

Recommendations For Android for MSM, update to a version that includes the fix for the integer overflow issue in msm adsp stream callback put. For Firefox OS for MSM, update to a version that includes the fix for the integer overflow issue in msm adsp stream callback put. For QRD Android, update to a version that includes the fix for the integer overflow issue in msm adsp stream callback put.