PT-2018-6010 · Mozilla+2 · Firefox Os+2
Published
2018-01-10
·
Updated
2019-10-03
·
CVE-2017-15845
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Android for MSM (affected versions not specified)
Firefox OS for MSM (affected versions not specified)
QRD Android (affected versions not specified)
Description:
The issue arises from an invalid input of firmware size, specifically a negative value, from user space. This can potentially lead to a memory leak or buffer overflow during the WLAN cal data store operation.
Recommendations:
For Android for MSM, restrict access to the WLAN cal data store operation until a fix is available.
For Firefox OS for MSM, avoid using negative firmware size values in user space to minimize the risk of exploitation.
For QRD Android, consider disabling the WLAN cal data store operation temporarily as a workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Missing Release of Resource after Effective Lifetime
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Android
Firefox Os
Qrd Android