Логотип exploitDog
bind:CVE-2017-14882
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2017-14882

Количество 3

Количество 3

nvd логотип

CVE-2017-14882

почти 8 лет назад

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function lim_process_action_vendor_specific(), a comparison is performed with the incoming action frame body without validating if the action frame body received is of valid length, potentially leading to an out-of-bounds access.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-2vpr-464c-8pg4

больше 3 лет назад

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function lim_process_action_vendor_specific(), a comparison is performed with the incoming action frame body without validating if the action frame body received is of valid length, potentially leading to an out-of-bounds access.

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2018-00601

больше 8 лет назад

Уязвимость функции lim_process_action_vendor_specific компонента WLAN операционной системы Android из репозитория CAF, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2017-14882

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function lim_process_action_vendor_specific(), a comparison is performed with the incoming action frame body without validating if the action frame body received is of valid length, potentially leading to an out-of-bounds access.

CVSS3: 7.5
1%
Низкий
почти 8 лет назад
github логотип
GHSA-2vpr-464c-8pg4

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing VENDOR specific action frame in the function lim_process_action_vendor_specific(), a comparison is performed with the incoming action frame body without validating if the action frame body received is of valid length, potentially leading to an out-of-bounds access.

CVSS3: 7.5
1%
Низкий
больше 3 лет назад
fstec логотип
BDU:2018-00601

Уязвимость функции lim_process_action_vendor_specific компонента WLAN операционной системы Android из репозитория CAF, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.5
1%
Низкий
больше 8 лет назад

Уязвимостей на страницу