CVE-2017-9712

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description A buffer over-read issue occurs when userspace provides a too-large IE length in wlan hdd cfg80211 set ie. This issue affects Android releases from CAF using the Linux kernel.

Recommendations For Android for MSM, update to a version that includes a fix for this issue. For Firefox OS for MSM, update to a version that includes a fix for this issue. For QRD Android, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the IE length in wlan hdd cfg80211 set ie to prevent buffer over-reads.