CVE-2017-9693

🗓️ 30 Mar 2018 21:00:00Reported by qualcommType

The length of attribute value for STA_EXT_CAPABILITY in __wlan_hdd_change_station in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-06 being less than the actual lenth of StaParams.extn_capability results in a read for extra bytes when a memcpy is done from params->ext_capab to StaParams.extn_capability using the sizeof(StaParams.extn_capability)

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2017-9693	30 Mar 201821:00	–	cve
EUVD	EUVD-2017-18624	7 Oct 202500:30	–	euvd
NVD	CVE-2017-9693	30 Mar 201821:29	–	nvd
Prion	Code injection	30 Mar 201821:29	–	prion

[
  {
    "product": "Android for MSM, Firefox OS for MSM, QRD Android",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All Android releases from CAF using the Linux kernel"
      }
    ]
  }
]

Source	Link
source	www.source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/
codeaurora	www.codeaurora.org/security-bulletin/2017/10/20/october-2017-v1
securityfocus	www.securityfocus.com/bid/100210

31 Mar 2018 09:57Current

5.9Medium risk

Vulners AI Score5.9

EPSS0.00192