Описание
In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
EPSS
Процентиль: 2%
0.00014
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-129
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation.
EPSS
Процентиль: 2%
0.00014
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-129