PT-2018-10458 · Mozilla+3 · Firefox Os+3

Published 2018-09-18 · Updated 2018-11-09 · CVE-2018-11293

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description The issue is related to the linux kernel in Android releases. Specifically, in the wma ndp confirm event handler and wma ndp indication event handler functions, the ndp cfg length and num ndp app info values are obtained from firmware. If these values are not properly checked, it may lead to a buffer over-read when the values are too large.

Recommendations For Android for MSM, ensure that the ndp cfg length and num ndp app info values from firmware are validated to prevent buffer over-read. For Firefox OS for MSM, validate the ndp cfg length and num ndp app info values from firmware to prevent buffer over-read. For QRD Android, validate the ndp cfg length and num ndp app info values from firmware to prevent buffer over-read.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2018-11293

Affected Products

Android

Firefox Os

Linux Kernel

Qrd Android

References · 4

• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=6fb7ac8d49631cdd09dbe72669d1a660dfce3bdb · Patch
• https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11293 · Security Note
• https://codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin · Patch