CVE-2017-18050

Name of the Vulnerable Software and Affected Versions: Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description: The issue arises from improper input validation for vdev map in the wma tbttoffset update event handler() function, which receives input from firmware. This can lead to a potential buffer overwrite and out of bounds memory read.

Recommendations: For Android for MSM, consider restricting access to the wma tbttoffset update event handler() function until a patch is available. For Firefox OS for MSM, restrict the use of the vdev map variable in the affected function to minimize the risk of exploitation. For QRD Android, as a temporary workaround, consider disabling the wma tbttoffset update event handler() function until a fix is provided.