CoreCVE
Back

HIGH

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for resp_event->vdev_id in wma_unified_bcntx_status_event_handler(), which is received from firmware, leads to potential out of bounds memory read

Published Mar 16, 2018

Description

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for resp_event->vdev_id in wma_unified_bcntx_status_event_handler(), which is received from firmware, leads to potential out of bounds memory read.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-20

Improper Input Validation

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner qualcomm
Published Mar 16, 2018
Updated Sep 17, 2024
Reserved Jan 22, 2018
Link CVE-2017-18060
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-18060
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-18060