PT-2018-8523
CVE-2017-9689
·
Published
2018-01-10
·
Updated
2018-01-26
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Android for MSM (affected versions not specified)
Firefox OS for MSM (affected versions not specified)
QRD Android (affected versions not specified)
Description
A specially-crafted HDMI CEC message can cause stack memory corruption in the affected systems.
Recommendations
For Android for MSM, update to a version that includes the fix for this issue.
For Firefox OS for MSM, update to a version that includes the fix for this issue.
For QRD Android, update to a version that includes the fix for this issue.
As a temporary workaround, consider disabling HDMI CEC functionality until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾