PT-2017-19133 · Mozilla+2 · Firefox Os+2

Publicado 2017-11-16 · Atualizado 2017-12-01 · CVE-2017-9719

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android for MSM versions (affected versions not specified) Firefox OS for MSM versions (affected versions not specified) QRD Android versions (affected versions not specified)

Description A buffer overflow issue exists in the kernel driver MDSS, specifically in HDMI CEC parsing, when the frame size is out of range. This issue affects Android releases from CAF using the Linux kernel.

Recommendations For Android for MSM, update the kernel driver MDSS to prevent buffer overflow in HDMI CEC parsing. For Firefox OS for MSM, update the kernel driver MDSS to prevent buffer overflow in HDMI CEC parsing. For QRD Android, update the kernel driver MDSS to prevent buffer overflow in HDMI CEC parsing.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-9719

Produtos afetados

Android

Firefox Os

Qrd Android

Referências · 2

• https://source.android.com/security/bulletin/pixel/2017-11-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9719 · Nota de Segurança