CoreCVE
Back

HIGH

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for cmpl_params->num_reports, param_buf->desc_ids and param_buf->status in wma_mgmt_tx_bundle_completion_handler(), which is received from firmware, leads to potential out of bounds memory read

Published Mar 16, 2018

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for cmpl_params->num_reports, param_buf->desc_ids and param_buf->status in wma_mgmt_tx_bundle_completion_handler(), which is received from firmware, leads to potential out of bounds memory read.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-20

Improper Input Validation

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner qualcomm
Published Mar 16, 2018
Updated Sep 17, 2024
Reserved Jan 22, 2018
Link CVE-2017-18052
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-18052
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-18052