CVE-2017-18055

Name of the Vulnerable Software and Affected Versions: Android for MSM versions (affected versions not specified) Firefox OS for MSM versions (affected versions not specified) QRD Android versions (affected versions not specified)

Description: The issue arises from improper input validation for wmi event->num vdev mac entries in the wma pdev set hw mode resp evt handler() function, which receives data from firmware, potentially leading to a buffer overflow.

Recommendations: For Android for MSM, ensure proper validation of wmi event->num vdev mac entries to prevent buffer overflow. For Firefox OS for MSM, consider implementing input validation for wmi event->num vdev mac entries in the wma pdev set hw mode resp evt handler() function as a mitigation measure. For QRD Android, restrict access to the wma pdev set hw mode resp evt handler() function until proper input validation for wmi event->num vdev mac entries is implemented.