PT-2018-10458 · Mozilla+3 · Firefox Os+3

Publicado 2018-09-18 · Atualizado 2018-11-09 · CVE-2018-11293

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description The issue is related to the linux kernel in Android releases. Specifically, in the wma ndp confirm event handler and wma ndp indication event handler functions, the ndp cfg length and num ndp app info values are obtained from firmware. If these values are not properly checked, it may lead to a buffer over-read when the values are too large.

Recommendations For Android for MSM, ensure that the ndp cfg length and num ndp app info values from firmware are validated to prevent buffer over-read. For Firefox OS for MSM, validate the ndp cfg length and num ndp app info values from firmware to prevent buffer over-read. For QRD Android, validate the ndp cfg length and num ndp app info values from firmware to prevent buffer over-read.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-11293

Produtos afetados

Android

Firefox Os

Linux Kernel

Qrd Android

Referências · 4

• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=6fb7ac8d49631cdd09dbe72669d1a660dfce3bdb · Correção
• https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11293 · Nota de Segurança
• https://codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin · Correção