PT-2018-6010 · Mozilla+2 · Firefox Os+2
Publicado
2018-01-10
·
Atualizado
2019-10-03
·
CVE-2017-15845
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Android for MSM (affected versions not specified)
Firefox OS for MSM (affected versions not specified)
QRD Android (affected versions not specified)
Description:
The issue arises from an invalid input of firmware size, specifically a negative value, from user space. This can potentially lead to a memory leak or buffer overflow during the WLAN cal data store operation.
Recommendations:
For Android for MSM, restrict access to the WLAN cal data store operation until a fix is available.
For Firefox OS for MSM, avoid using negative firmware size values in user space to minimize the risk of exploitation.
For QRD Android, consider disabling the WLAN cal data store operation temporarily as a workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Missing Release of Resource after Effective Lifetime
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Android
Firefox Os
Qrd Android