PT-2018-5735 · Mozilla+1 · Firefox Os+2
Published
2018-04-03
·
Updated
2019-10-03
·
CVE-2017-14880
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Qualcomm Android for MSM versions prior to security patch level 2018-04-05
Firefox OS for MSM versions prior to security patch level 2018-04-05
QRD Android versions prior to security patch level 2018-04-05
Description:
The issue arises when the IPA WAN-driver processes multiple requests from the modem or user-space module. Specifically, the global variable
num q6 rule lacks a mutex lock, allowing it to be accessed and modified by multiple threads simultaneously.Recommendations:
For Qualcomm Android for MSM versions prior to security patch level 2018-04-05, update to a version with a security patch level of 2018-04-05 or later.
For Firefox OS for MSM versions prior to security patch level 2018-04-05, update to a version with a security patch level of 2018-04-05 or later.
For QRD Android versions prior to security patch level 2018-04-05, update to a version with a security patch level of 2018-04-05 or later.
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firefox Os
Qrd Android
Qualcomm Android