PT-2018-6640 · Mozilla+2 · Firefox Os+2
Publicado
2018-03-16
·
Atualizado
2018-04-04
·
CVE-2017-18050
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Android for MSM (affected versions not specified)
Firefox OS for MSM (affected versions not specified)
QRD Android (affected versions not specified)
Description:
The issue arises from improper input validation for
vdev map in the wma tbttoffset update event handler() function, which receives input from firmware. This can lead to a potential buffer overwrite and out of bounds memory read.Recommendations:
For Android for MSM, consider restricting access to the
wma tbttoffset update event handler() function until a patch is available.
For Firefox OS for MSM, restrict the use of the vdev map variable in the affected function to minimize the risk of exploitation.
For QRD Android, as a temporary workaround, consider disabling the wma tbttoffset update event handler() function until a fix is provided.Correção
RCE
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Android
Firefox Os
Qrd Android