CVE-2017-18159

Name of the Vulnerable Software and Affected Versions: Android for MSM versions prior to security patch level 2018-06-05 Firefox OS for MSM versions prior to security patch level 2018-06-05 QRD Android versions prior to security patch level 2018-06-05

Description: The issue arises when processing a StrHwPlatform with a length smaller than EFICHIPINFO MAX ID LENGTH, potentially leading to an array out of bounds access.

Recommendations: For Android for MSM versions prior to security patch level 2018-06-05, update to a version with a security patch level of 2018-06-05 or later. For Firefox OS for MSM versions prior to security patch level 2018-06-05, update to a version with a security patch level of 2018-06-05 or later. For QRD Android versions prior to security patch level 2018-06-05, update to a version with a security patch level of 2018-06-05 or later.