PT-2018-6652

CVE-2017-18065

·

Published

2018-03-16

·

Updated

2018-04-04

Description by

CVSS 2.0
4.6
Medium
MetricsAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Android for MSM versions (affected versions not specified) Firefox OS for MSM versions (affected versions not specified) QRD Android versions (affected versions not specified)
Description: The issue is related to improper input validation for vent->vdev id in the wma action frame filter mac event handler() function, which receives input from firmware. This leads to arbitrary code execution.
Recommendations: For Android for MSM, ensure proper input validation is implemented for vent->vdev id in the wma action frame filter mac event handler() function to prevent arbitrary code execution. For Firefox OS for MSM, ensure proper input validation is implemented for vent->vdev id in the wma action frame filter mac event handler() function to prevent arbitrary code execution. For QRD Android, ensure proper input validation is implemented for vent->vdev id in the wma action frame filter mac event handler() function to prevent arbitrary code execution.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾