Lucene search
PRIOn knowledge basePRION:CVE-2017-15854HistoryJun 12, 2018 - 8:29 p.m.
Integer overflow
2018-06-1220:29:00
PRIOn knowledge base
www.prio-n.com
2
The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_event_handler() for the derived length len leading to a subsequent buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Related
cvelist
cvelist
CVE-2017-15854
2018-05-11 00:00:00
cve
cve
CVE-2017-15854
2018-06-12 20:29:00
nvd
nvd
CVE-2017-15854
2018-06-12 20:29:00
androidsecurity
androidsecurity
Pixel / Nexus Security Bulletin—May 2018
2018-05-07 00:00:00