Input validation

2018-02-2323:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation.

References

source.android.com/security/bulletin/2018-02-01