CVE-2018-5872

CVE-2018-5872 affects Qualcomm WLAN (qca-wifi-host-cmn) in Android CAF releases. The issue arises from missing length checks on Beacon Information Elements, enabling a nearby attacker to cause a buffer overread and potentially execute arbitrary code in a privileged process. Android’s 2018-07-05 p...

CVE-2018-5872

While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-07-05, the use of an out-of-range pointer offset can occur...