CVE-2018-5896

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to security patch level 2018-06-05 Firefox OS for MSM versions prior to security patch level 2018-06-05 QRD Android versions prior to security patch level 2018-06-05

Description: The issue is caused by an out-of-bound read due to not checking the source buffer length against the length of the packet stream to be copied, which may lead to a kernel panic.

Recommendations: For Android for MSM versions prior to security patch level 2018-06-05, update to a version with security patch level 2018-06-05 or later. For Firefox OS for MSM versions prior to security patch level 2018-06-05, update to a version with security patch level 2018-06-05 or later. For QRD Android versions prior to security patch level 2018-06-05, update to a version with security patch level 2018-06-05 or later.