CVE-2017-14887

Name of the Vulnerable Software and Affected Versions: Android for MSM versions (affected versions not specified) Firefox OS for MSM versions (affected versions not specified) QRD Android versions (affected versions not specified)

Description: The issue is related to the processing of messages of type eWNI SME MODIFY ADDITIONAL IES, where an integer overflow may lead to a heap buffer overflow.

Recommendations: For Android for MSM, update to a version that includes the fix for this issue. For Firefox OS for MSM, update to a version that includes the fix for this issue. For QRD Android, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.