Описание
In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound may result in an out of bounds memory access.
Ссылки
- Third Party AdvisoryVDB Entry
- PatchVendor Advisory
- Issue TrackingPatchThird Party Advisory
- Third Party AdvisoryVDB Entry
- PatchVendor Advisory
- Issue TrackingPatchThird Party Advisory
Уязвимые конфигурации
EPSS
7.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
Связанные уязвимости
In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound may result in an out of bounds memory access.
Уязвимость функции аудио драйвера мобильного приложения MSM для операционной системы Android, позволяющая нарушителю вызвать переполнение буфера
EPSS
7.8 High
CVSS3
9.3 Critical
CVSS2