CoreCVE
Back

HIGH

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev_map in wma_tbttoffset_update_event_handler(), which is received from firmware, leads to potential buffer overwrite and out of bounds memory read

Published Mar 16, 2018

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev_map in wma_tbttoffset_update_event_handler(), which is received from firmware, leads to potential buffer overwrite and out of bounds memory read.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-20

Improper Input Validation

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner qualcomm
Published Mar 16, 2018
Updated Sep 16, 2024
Reserved Jan 22, 2018
Link CVE-2017-18050
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-18050
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-18050